Executive brief
Gradio CORS Origin Validation Bypass Vulnerability
Affected products
- PyPI gradio
Junglewise Threat Intelligence
CVE-2025-5320: PYSEC-2026-1423 - Gradio CORS Origin Validation Bypass Vulnerability
CVE-2025-5320 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: gradio (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1410 - Gradio DOS in multipart boundry while uploading the file
- PYSEC-2026-1411 - Gradio Vulnerable to Open Redirect
- PYSEC-2026-1418 - Gradio Path Traversal vulnerability
- PYSEC-2026-1417 - Gradio Vulnerable to Arbitrary File Deletion
- PYSEC-2026-1412 - Gradio Vulnerable to Denial of Service (DoS) via Crafted Zip Bomb