Sign in
Deutsch English Español Polski
Medium

Gradio's CORS origin validation accepts the null origin

  • Disclosed: 10.10.2024
  • Updated: 11.10.2026 12:19

Impact

What kind of vulnerability is it? Who is impacted?

This vulnerability relates to CORS origin validation accepting a null origin. When a Gradio server is deployed locally, the localhost_aliases variable includes "null" as a valid origin. This allows attackers to make unauthorized requests from sandboxed iframes or other sources with a null origin, potentially leading to data theft, such as user authentication tokens or uploaded files. This impacts users running Gradio locally, especially those using basic authentication.

Patches

Yes, please upgrade to gradio>=5.0 to address this issue.

Workarounds

Is there a way for users to fix or remediate the vulnerability without upgrading?

As a workaround, users can manually modify the localhost_aliases list in their local Gradio deployment to exclude "null" as a valid origin. By removing this value, the Gradio server will no longer accept requests from sandboxed iframes or sources with a null origin, mitigating the potential for exploitation.

Affected software

Click a technology to see all vulnerabilities affecting it.

PlatformPackageVulnerable versionsFixed in
Python (PyPI) gradio < 5.0.0 5.0.0

References

CVSS score 5.4/10
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Weakness (CWE)
CWE-285, CWE-346
Platform
Python (PyPI)
Package
gradio
Disclosed
10.10.2024
Updated
11.10.2026 12:19

Sources and licenses

OSV / GitHub Advisory Database - PYSEC-2024-214 - PyPA Advisory Database; CC BY 4.0

OSV / GitHub Advisory Database - GHSA-89v2-pqfv-c5r9 - CC BY 4.0

Vulnerability history: gradio

All published vulnerabilities of this package (Python (PyPI)), newest first. Shows whether this is a one-off slip or a package that needs watching.

All (51) in the archive
Total entries
51
First → latest
12.2021 07.2026
Without a fix
13
Exploited in attacks
0

Severity breakdown

  • Critical 5
  • High 19
  • Medium 22
  • Low 5

Disclosures per year

Severity:
  1. Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplyi
    High CVE-2026-49119 < 6.16.0 6.16.0
  2. Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing
    High · 8.2 CVE-2026-28416 < 6.6.0 6.6.0
  3. Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+
    High · 7.5 CVE-2026-28414 < 6.7.0 6.7.0
  4. Gradio DOS in multipart boundry while uploading the file
    High · 7.5 CVE-2024-8966 <= 5.22.0 no fix
  5. Gradio Vulnerable to Denial of Service (DoS) via Crafted HTTP Request
    High · 7.5 CVE-2024-10624 >= 4.38.0, <= 5.0.0-beta.2 no fix
  6. Gradio Vulnerable to Arbitrary File Deletion
    High · 8.2 CVE-2024-10648 >= 4.0.0, <= 5.0.0b2 no fix
  7. Gradio Vulnerable to Denial of Service (DoS) via Crafted Zip Bomb
    High · 7.5 CVE-2024-10569 >= 4.0.0, <= 5.0.0b2 no fix
  8. Gradio Blocked Path ACL Bypass Vulnerability
    Critical CVE-2025-23042 < 5.11.0 5.11.0
  9. Gradio uses insecure communication between the FRP client and server
    High · 8.1 CVE-2024-47871 < 5.0.0 5.0.0
  10. Gradio has a race condition in update_root_in_config may redirect user traffic
    High · 7.0 CVE-2024-47870 < 5.0.0 5.0.0
  11. Gradio lacks integrity checking on the downloaded FRP client
    High · 7.5 CVE-2024-47867 < 5.0.0 5.0.0
  12. Gradio's CORS origin validation accepts the null origin this entry
    Medium · 5.4 CVE-2024-47165 < 5.0.0 5.0.0
  13. Gradios's CORS origin validation is not performed when the request has a cookie
    High · 8.8 CVE-2024-47084 < 4.44.0 4.44.0
  14. Gradio allows users to access arbitrary files
    High · 8.1 CVE-2024-1728 < 4.19.2 4.19.2
  15. Server-Side Request Forgery in gradio
    High · 8.6 CVE-2024-4325 <= 4.36.0 no fix
  16. A local file inclusion vulnerability exists in the JSON component of gradio-app/gradio version 4.25. The vulnerability arises from improper input validation in the `postprocess()` function within `gra
    High · 7.5 CVE-2024-4941 < 4.31.4 4.31.4
  17. A command injection vulnerability exists in the gradio-app/gradio repository, specifically within the 'test-functional.yml' workflow. The vulnerability arises due to improper neutralization of special
    Critical · 9.1 CVE-2024-4253 < 4.29.0 4.29.0
  18. Gradio before 4.20 allows credential leakage on Windows.
    High · 7.5 CVE-2024-34510 < 4.20.0 4.20.0
  19. gradio vulnerable to Path Traversal
    High · 7.5 CVE-2024-1561 < 4.13.0 4.13.0
  20. gradio Server-Side Request Forgery vulnerability
    High · 7.3 CVE-2024-2206 < 4.18.0 4.18.0
  21. A local file include could be remotely triggered in Gradio due to a vulnerable user-supplied JSON value in an API request.
    Critical · 9.4 CVE-2024-0964 not given by the source no fix
  22. Gradio makes the `/file` secure against file traversal and server-side request forgery attacks
    High · 8.6 CVE-2023-51449 < 4.11.0 4.11.0
  23. Gradio Exposure of Sensitive Information to an Unauthorized Actor vulnerability
    Critical · 9.6 CVE-2023-6572 < 4.14.0 4.14.0
  24. `gradio` is an open source framework for building interactive machine learning models and demos. Prior to version 2.8.11, `gradio` suffers from Improper Neutralization of Formula Elements in a CSV Fil
    High · 8.8 CVE-2022-24770 < 2.8.11 2.8.11
  25. Files on the host computer can be accessed from the Gradio interface
    Critical · 8.3 CVE-2021-43831 < 2.5.0 2.5.0

Know which vulnerabilities affect your application

With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.

Connect your application
DockRay newsletter

Application security in your inbox

Important vulnerabilities, actionable guidance and practical advice for your applications. Choose your technologies and follow what matters to your project.

  • A daily digest of new vulnerabilities, critical ones included.
  • Notifications about important updates.
  • Practical advice on application security and monitoring.

Leave empty to receive updates for every technology.

Privacy policy

Free to subscribe. Unsubscribe with one click in any email.