Lokale Datei-Inklusion in gradio

The vulnerability lies in the postprocess() function within gradio/components/jsoncomponent.py. An attacker can craft malicious JSON input that, when parsed by Gradio, triggers the processingutils.movefilesto_cache() function to traverse a malicious path key. This allows the attacker to specify a file path, move it to a temporary directory, and subsequently retrieve it via the /file=.. endpoint. The potential impact includes unauthorized access to sensitive files, such as configuration files, source code, or user data, depending on the server's file system structure and permissions. While requiring local access to interact with the Gradio application, this vulnerability could be exploited by anyone with access to the application's interface.

Applications utilizing Gradio for building interactive web interfaces, particularly those handling sensitive data or deployed in environments with limited security controls, are at risk. This includes developers using Gradio for machine learning demos, data visualization tools, or internal dashboards.

• python / gradio:

import os
import json

# Check for vulnerable Gradio versions
process = os.popen('pip show gradio')
output = process.read()
version = None
for line in output.splitlines():
    if line.startswith('Version:'):
        version = line.split('==')[1]
        break

if version and float(version) <= 4.9.1:
    print("VULNERABLE: Gradio version is {}".format(version))
else:
    print("Gradio version is safe or not installed.")

• generic web: Check Gradio application endpoints for the existence of /file=.. and attempt to access arbitrary files.

1. 2024-06-06Disclosure

   disclosure

1. Reserviert2024-05-15
2. Veröffentlicht2024-06-06
3. Geändert2025-10-16
4. EPSS aktualisiert2026-04-02

The primary mitigation for CVE-2024-4941 is to upgrade to Gradio version 4.31.3 or later, which includes the necessary input validation fixes. If upgrading is not immediately feasible, consider implementing a Web Application Firewall (WAF) rule to block requests containing suspicious JSON payloads or attempts to access the /file=.. endpoint. Additionally, restrict file system permissions to prevent unauthorized access to sensitive files. Thoroughly review and sanitize all user-supplied JSON input before processing it within the Gradio application. After upgrading, confirm the fix by attempting to trigger the vulnerable endpoint with a malicious JSON payload and verifying that the file retrieval is blocked.