MEDIUM5.4

PYSEC-2026-1411

Gradio Vulnerable to Open Redirect

Details

An open redirect vulnerability exists in the latest version of gradio-app/gradio. The vulnerability allows an attacker to redirect users to a malicious website by URL encoding. This can be exploited by sending a crafted request to the application, which results in a 302 redirect to an attacker-controlled site.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/gradio

Introduced in: 0

No fixed version published yet for gradio (pip). Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2024-8021[ADVISORY]
https://github.com/gradio-app/gradio[PACKAGE]
https://huntr.com/bounties/adc23067-ec04-47ef-9265-afd452071888[WEB]
https://pypi.org/project/gradio[PACKAGE]
https://github.com/advisories/GHSA-7v2w-h4gh-w5cv[ADVISORY]