CVE-2026-28416

Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.6.0, a Server-Side Request Forgery (SSRF) vulnerability in Gradio allows an attacker to make arbitrary HTTP requests from a victim's server by hosting a malicious Gradio Space. When a victim application uses `gr.load()` to load an attacker-controlled Space, the malicious `proxy_url` from the config is trusted and added to the allowlist, enabling the attacker to access internal services, cloud metadata endpoints, and private networks through the victim's infrastructure. Version 6.6.0 fixes the issue.

• CWE-918

• https://github.com/gradio-app/gradio/security/advisories/GHSA-jmh7-g254-2cq9Vendor Advisory

Published

Feb 27, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-28410The Graph is an indexing protocol for querying networks like…8.1
• CVE-2026-28411WeGIA is a web manager for charitable institutions. Prior to…9.8
• CVE-2026-28412Textream is a free macOS teleprompter app. Prior to version …7.5
• CVE-2026-28413Products.isurlinportal is a replacement for isURLInPortal me…6.1
• CVE-2026-28414Gradio is an open-source Python package designed for quick p…7.5
• CVE-2026-28415Gradio is an open-source Python package designed for quick p…4.7
• CVE-2026-28417Vim is an open source, command line text editor. Prior to ve…7.8
• CVE-2026-28418Vim is an open source, command line text editor. Prior to ve…5.5
• CVE-2026-28419Vim is an open source, command line text editor. Prior to ve…6.6
• CVE-2026-2842Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2026-28420Vim is an open source, command line text editor. Prior to ve…4.4
• CVE-2026-28421Vim is an open source, command line text editor. Versions pr…7.8