CVE-2021-43831High· 8.3▾ MidnightPoC availableFiles on the host computer can be accessed from the Gradio interface
Files on the host computer can be accessed from the Gradio interface
▾ Midnight zone — Critical, or high with PoC / in-the-wild
Depth score58/ 100 · Moderate
impact 45.7 · likelihood 0.8 · exploitation 12
Proof of concept
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Published
Jan 21, 2022
Updated
Jul 8, 2026
CVSS
8.3
Vendor
gradio
Product
gradio
CWE
—
Depth score
58 · Moderate
EPSS
3.8% · p90
Platforms
—
Source
OSV
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
Exploit availability
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
- Nuclei
EPSS history
Exploit-prediction probability, daily snapshots since Jul 8.
Timeline
Disclosure to exploitation, from the record and what we observed since indexing it.
- Published
Disclosed via OSV
- Record revised
Last analysed / modified upstream
- EPSS first tracked
3.8%
- Public exploit observed
Nuclei ×1
Affected
- gradio < 2.5.0
Patched in
- gradio 2.5.0
Full technical detail▾
Overview
Impact
This is a vulnerability that affects anyone who creates and publicly shares Gradio interfaces using gradio<2.4.8. Because of the way that static files were being served, someone who generated a public Gradio link and shared it with others would potentially be exposing the files on the computer that generated the link, while the link was active. An attacker would be able to view the contents of a file on the computer if they knew the exact relative filepath. We do not have any evidence that this was ever exploited, but we treated the issue seriously and immediately took steps to mitigate it (see below)
Response
- We worked with @haby0 to immediately patch the issue and released a new version,
gradio 2.5.0, within 24 hours of the issue being brought to our attention - We enabled a notification that is printed to anyone using an older version of gradio telling them to upgrade (see screenshot below)
- We expanded our test suite to test for this vulnerability ensuring that our patch does not get reverted in future releases of
gradio
Patches
The problem has been patched in gradio>=2.5.0.
Affected packages
gradio < 2.5.0
Remediation
Upgrade to a patched release:
gradio 2.5.0
References
- https://github.com/gradio-app/gradio/security/advisories/GHSA-rhq2-3vr9-6mcr
- https://nvd.nist.gov/vuln/detail/CVE-2021-43831
- https://github.com/gradio-app/gradio/commit/41bd3645bdb616e1248b2167ca83636a2653f781
- https://github.com/gradio-app/gradio
- https://github.com/pypa/advisory-database/tree/main/vulns/gradio/PYSEC-2021-873.yaml
Change history
Field changes observed since this record was first indexed.
- Sep 8, 2026Public exploit / PoC published
- Sep 8, 2026Public exploit flag cleared
- Sep 8, 2026Public exploit / PoC published
- Sep 8, 2026Public exploit flag cleared
- Sep 8, 2026Public exploit / PoC published
Related vulnerabilities
Connected by shared product, vendor, weakness, or advisory.
CVE-2023-6572Critical· 9.6Gradio Exposure of Sensitive Information to an Unauthorized Actor vulnerability
same productshared advisory#osvCVE-2023-51449High· 8.6Gradio makes the `/file` secure against file traversal and server-side request forgery attacks
same productshared advisory#osvCVE-2024-1183Medium· 6.5gradio Server-Side Request Forgery vulnerability
same productshared advisory#osvCVE-2024-1561High· 7.5gradio vulnerable to Path Traversal
same productshared advisory#osvCVE-2024-4940Medium· 5.4Open redirect in gradio
same productshared advisory#osvCVE-2024-4325High· 8.6Server-Side Request Forgery in gradio
same productshared advisory#osv
#osv#pip#exploit-available