{"data":{"id":"39405a90-69b9-49c9-9a94-41abf4bc0f08","title":"CVE-2026-27167: Gradio is an open-source Python package designed for quick prototyping. Starting in version 4.16.0 and prior to version…","summary":"Gradio versions from 4.16.0 up to, but not including, 6.6.0 automatically enable mocked OAuth routes when OAuth components such as gr.LoginButton are used outside Hugging Face Spaces. A request to /login/huggingface causes the server to store its own Hugging Face access token in the visitor's session cookie. Because that cookie is signed with a hardcoded secret derived from the string \"-v4\", its payload is trivially decodable, and any remote attacker who can reach the application can steal the server owner's HF token.","solution":"Fixed in 6.6.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-27167","publishedAt":"2026-02-27T22:16:22.820Z","cveId":"CVE-2026-27167","cweIds":["CWE-522","CWE-798"],"cvssScore":"0","cvssSeverity":"none","severity":"info","attackType":["other"],"issueType":"vulnerability","affectedPackages":["gradio@>= 4.16.0, < 6.6.0 (fixed: 6.6.0)"],"affectedPackageNames":["gradio"],"affectedPackageRefs":["pypi:gradio"],"affectedVendors":["HuggingFace"],"affectedVendorsRaw":["Gradio","Hugging Face","huggingface_hub"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Gradio token leak through mocked OAuth login route","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.0051,"epssCheckedAt":"2026-11-04T06:10:13.969Z","kevDateAdded":null,"advisoryAliases":["GHSA-h3h8-3v2v-rg7m"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:50:40.540Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2026-02-17T22:32:57.131Z","daysToFix":-10,"fixCheckedAt":"2026-10-29T21:40:26.593Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"gradio","fixedVersion":"6.6.0","matchedVersion":"6.6.0","fixReleasedAt":"2026-02-17T22:32:57.131Z","daysToFix":-10,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:40:26.446Z"}]}}