Is CVE-2026-28415 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-28415 being exploited in the wild.

How severe is CVE-2026-28415?

Medium severity, with a CVSS score of 4.3, published 1 March 2026.

Which products and versions are affected?

gradio (PyPI) < 6.6.0, ECOSYSTEM:introduced=0,fixed=6.6.0.

Is there a fix for CVE-2026-28415?

Yes. gradio (PyPI): upgrade to 6.6.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-28415 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-28415?

Check whether you run gradio (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-28415: Gradio open redirect in OAuth flow

Q: Which products and versions are affected?

gradio (PyPI) < 6.6.0, ECOSYSTEM:introduced=0,fixed=6.6.0.

Q: Is there a fix for CVE-2026-28415?

Yes. gradio (PyPI): upgrade to 6.6.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

Q: How is CVE-2026-28415 attacked?

It is attacked over the network, in a software library.

Q: Am I affected by CVE-2026-28415?

Check whether you run gradio (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-28415 · Severity: medium · CVSS 4.3 · Published 2026-03-01

Gradio, a library used to build and share machine learning web applications, contains a flaw in its login and logout process. An attacker can create a specially crafted link that, when clicked by a user, redirects them from a trusted Gradio or Hugging Face domain to a malicious website. This can be used in phishing campaigns to trick users into providing credentials or downloading malware by exploiting their trust in the original domain.

Technologies: gradio (PyPI). Vendors: PyPI.

Quick answers

Is CVE-2026-28415 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-28415 being exploited in the wild.
How severe is CVE-2026-28415?: Medium severity, with a CVSS score of 4.3, published 1 March 2026.
Which products and versions are affected?: gradio (PyPI) < 6.6.0, ECOSYSTEM:introduced=0,fixed=6.6.0.
Is there a fix for CVE-2026-28415?: Yes. gradio (PyPI): upgrade to 6.6.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-28415 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-28415?: Check whether you run gradio (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

gradio (PyPI): upgrade to 6.6.0 or later
```
pip install "gradio>=6.6.0"
```

Technical details

An open redirect vulnerability exists in Gradio's OAuth implementation within the `_redirect_to_target()` function. The function retrieves a destination from the `_target_url` query parameter and passes it directly to a `RedirectResponse` without validation. This affects the `/logout` and `/login/callback` endpoints in applications where OAuth is enabled (such as those using `gr.LoginButton` on Hugging Face Spaces). An attacker can exploit this by sending a crafted URL to a victim, which will redirect them to an external malicious host after a successful login or logout action. The vulnerability is fixed in version 6.6.0 by sanitizing the parameter to only allow local paths.

Affected products

gradio-app gradio < 6.6.0

Identifiers

CVE-2026-28415
GHSA-pfjf-5gxr-995x
PYSEC-2026-65

Timeline

2026-02-27: disclosed
2026-02-27: patched: Version 6.6.0 released
2026-03-01: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.