Gradio CVE Vulnerabilities

By Gradio Project — 1 known vulnerabilities

Critical
0
High
0
Medium
1
Low
0
None
0

All Gradio CVEs

Recent Highest Score Oldest
CVE-2026-48545
6.8 medium

Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-doma

May 27, 2026