CVE-2024-47167: SSRF in Gradio ≤5.0.0b9

The SSRF vulnerability in Gradio's /queue/join endpoint poses a significant risk. An attacker can leverage this to craft malicious HTTP requests that the Gradio server will execute on their behalf. This allows them to target internal services that are not directly accessible from the outside, potentially gaining access to sensitive data or performing actions as the Gradio server. The ability to upload content from these external URLs and store it locally further exacerbates the risk, as attackers could upload malicious files to the server. This is particularly concerning in environments where Gradio is used to expose machine learning models or other internal applications.

1. Reserved2024-09-19
2. Published2024-10-10
3. Modified2025-01-21
4. EPSS updated2026-04-02

The primary mitigation for CVE-2024-47167 is to upgrade Gradio to version 5.0.0 or later, which contains the fix. If an immediate upgrade is not feasible, consider implementing temporary workarounds. Restrict network access to the Gradio server to only allow connections to trusted internal resources. Implement a Web Application Firewall (WAF) with rules to block suspicious outbound HTTP requests, particularly those targeting unusual ports or internal IP addresses. Carefully review and validate any user-provided URLs before they are used in HTTP requests. After upgrading, confirm the fix by attempting to trigger the /queue/join endpoint with a known malicious URL and verifying that the request is blocked.