AVID-2026-R1539

Description

The is_in_or_equal function may be bypassed in Gradio (CVE-2024-47164)

Details

Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to the bypass of directory traversal checks within the is_in_or_equal function. This function, intended to check if a file resides within a given directory, can be bypassed with certain payloads that manipulate file paths using .. (parent directory) sequences. Attackers could potentially access restricted files if they are able to exploit this flaw, although the difficulty is high. This primarily impacts users relying on Gradio’s blocklist or directory access validation, particularly when handling file uploads. Users are advised to upgrade to gradio>=5.0 to address this issue. As a workaround, users can manually sanitize and normalize file paths in their Gradio deployment before passing them to the is_in_or_equal function. Ensuring that all file paths are properly resolved and absolute can help mitigate the bypass vulnerabilities caused by the improper handling of .. sequences or malformed paths.

Reason for inclusion in AVID: CVE-2024-47164 describes a path traversal bypass in Gradio, a Python framework widely used to build and deploy AI apps and dashboards. The vulnerability is in a software dependency (Gradio) that can be part of AI pipelines, affecting model serving/UI stacks. It is a security vulnerability (CWE-22) with potential unauthorized file access. The report provides details, mitigations (upgrade to gradio>=5.0) and references (NVD, GHSA). Therefore it satisfies AI-related, supply-chain (software component used to build/deploy AI systems), security, and evidence criteria.

References

Affected or Relevant Artifacts

Developer: gradio-app
Deployer: gradio-app
Artifact Details:

Type	Name
System	gradio

Impact

AVID Taxonomy Categorization

Risk domains: Security
SEP subcategories: S0100: Software Vulnerability
Lifecycle stages: L06: Deployment

CWE

ID	Description
CWE-22	CWE-22: Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’)

Other information

Report Type: Advisory
Credits:
Date Reported: 2024-10-10
Version: 0.3.3
AVID Entry