AVID-2026-R1548

Description

Insecure communication between the FRP client and server in Gradio (CVE-2024-47871)

Details

Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves insecure communication between the FRP (Fast Reverse Proxy) client and server when Gradio’s share=True option is used. HTTPS is not enforced on the connection, allowing attackers to intercept and read files uploaded to the Gradio server, as well as modify responses or data sent between the client and server. This impacts users who are sharing Gradio demos publicly over the internet using share=True without proper encryption, exposing sensitive data to potential eavesdroppers. Users are advised to upgrade to gradio>=5 to address this issue. As a workaround, users can avoid using share=True in production environments and instead host their Gradio applications on servers with HTTPS enabled to ensure secure communication.

Reason for inclusion in AVID: The CVE describes insecure (unencrypted) communication in the Gradio library, which is widely used to deploy AI demos and applications. This is a software vulnerability in a component (Gradio) commonly used in AI pipelines for building/serving ML apps, representing a software supply chain risk. The report provides explicit vulnerability behavior (data exposure, potential tampering) and a remediation (upgrade/gradio>=5).

References

• NVD entry
• https://github.com/gradio-app/gradio/security/advisories/GHSA-279j-x4gx-hfrh

Affected or Relevant Artifacts

• Developer: gradio-app
• Deployer: gradio-app
• Artifact Details:

Impact

AVID Taxonomy Categorization

• Risk domains: Security
• SEP subcategories: S0100: Software Vulnerability
• Lifecycle stages: L06: Deployment

CWE

Other information

• Report Type: Advisory
• Credits:
• Date Reported: 2024-10-10
• Version: 0.3.3
• AVID Entry