CVE-2024-1561

An issue was discovered in gradio-app/gradio, where the `/component_server` endpoint improperly allows the invocation of any method on a `Component` class with attacker-controlled arguments. Specifically, by exploiting the `move_resource_to_block_cache()` method of the `Block` class, an attacker can copy any file on the filesystem to a temporary directory and subsequently retrieve it. This vulnerability enables unauthorized local file read access, posing a significant risk especially when the application is exposed to the internet via `launch(share=True)`, thereby allowing remote attackers to read files on the host machine. Furthermore, gradio apps hosted on `huggingface.co` are also affected, potentially leading to the exposure of sensitive information such as API keys and credentials stored in environment variables.

• CWE-29

• https://github.com/gradio-app/gradio/commit/24a583688046867ca8b8b02959c441818bdb34a2Patch
• https://huntr.com/bounties/4acf584e-2fe8-490e-878d-2d9bf2698338Exploit, Third Party Advisory
• https://www.gradio.app/changelog#4-13-0Release Notes
• https://github.com/gradio-app/gradio/commit/24a583688046867ca8b8b02959c441818bdb34a2Patch
• https://huntr.com/bounties/4acf584e-2fe8-490e-878d-2d9bf2698338Exploit, Third Party Advisory
• https://www.gradio.app/changelog#4-13-0Release Notes

Published

Apr 16, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-1555When opening a website using the `firefox://` protocol handl…8.3
• CVE-2024-1556The incorrect object was checked for NULL in the built-in pr…6.5
• CVE-2024-1557Memory safety bugs present in Firefox 122. Some of these bug…8.1
• CVE-2024-1558A path traversal vulnerability exists in the `_create_model_…7.5
• CVE-2024-1559The Link Library plugin for WordPress is vulnerable to Store…6.1
• CVE-2024-1560A path traversal vulnerability exists in the mlflow/mlflow r…8.1
• CVE-2024-1562The WooCommerce Google Sheet Connector plugin for WordPress …5.3
• CVE-2024-1563An attacker could have executed unauthorized scripts on top …8.1
• CVE-2024-1564The wp-schema-pro WordPress plugin before 2.7.16 does not va…4.3
• CVE-2024-1565The EmbedPress – Embed PDF, YouTube, Google Docs, Vimeo, Wis…5.4
• CVE-2024-1566The Redirects plugin for WordPress is vulnerable to unauthor…6.5
• CVE-2024-1567The Royal Elementor Addons and Templates plugin for WordPres…9.8