CVE-2024-1540

A command injection vulnerability exists in the deploy+test-visual.yml workflow of the gradio-app/gradio repository, due to improper neutralization of special elements used in a command. This vulnerability allows attackers to execute unauthorized commands, potentially leading to unauthorized modification of the base repository or secrets exfiltration. The issue arises from the unsafe handling of GitHub context information within a `run` operation, where expressions inside `${{ }}` are evaluated and substituted before script execution. Remediation involves setting untrusted input values to intermediate environment variables to prevent direct influence on script generation.

• CWE-77

• https://github.com/gradio-app/gradio/commit/d56bb28df80d8db1f33e4acf4f6b2c4f87cb8b28Patch
• https://huntr.com/bounties/0e39e974-9a66-476f-91f5-3f37abb03d77Exploit, Third Party Advisory
• https://github.com/gradio-app/gradio/commit/d56bb28df80d8db1f33e4acf4f6b2c4f87cb8b28Patch
• https://huntr.com/bounties/0e39e974-9a66-476f-91f5-3f37abb03d77Exploit, Third Party Advisory

Published

Mar 27, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-1534The Booster for WooCommerce plugin for WordPress is vulnerab…5.4
• CVE-2024-1535The Paid Membership Plugin, Ecommerce, User Registration For…5.4
• CVE-2024-1536The Essential Addons for Elementor – Best Elementor Template…7.4
• CVE-2024-1537The Essential Addons for Elementor – Best Elementor Template…6.4
• CVE-2024-1538The File Manager plugin for WordPress is vulnerable to Cross…8.8
• CVE-2024-1539An issue has been discovered in GitLab EE affecting all vers…5.3
• CVE-2024-1541The Gutenberg Blocks by Kadence Blocks – Page Builder Featur…5.4
• CVE-2024-1543The side-channel protected T-Table implementation in wolfSSL…5.5
• CVE-2024-1544Generating the ECDSA nonce k samples a random number r and t…4.9
• CVE-2024-1545Fault Injection vulnerability in RsaPrivateDecryption functi…8.8
• CVE-2024-1546When storing and re-accessing data on a networking channel, …7.5
• CVE-2024-1547Through a series of API calls and redirects, an attacker-con…6.5