{"data":{"id":"50e12e7f-0738-4818-a24b-c3d40e33a1b3","title":"CVE-2026-28416: Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.6.0, a Server-Side Request…","summary":"CVE-2026-28416 is an SSRF flaw in Gradio, an open-source Python package for quick prototyping, in versions prior to 6.6.0. When a victim application calls `gr.load()` on an attacker-controlled Space, the malicious `proxy_url` from the config is trusted and added to the allowlist. An attacker can then make arbitrary HTTP requests from the victim's server, reaching internal services, cloud metadata endpoints and private networks.","solution":"Version 6.6.0 fixes the issue.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-28416","publishedAt":"2026-02-27T22:16:24.667Z","cveId":"CVE-2026-28416","cweIds":["CWE-918"],"cvssScore":"8.2","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["gradio@< 6.6.0 (fixed: 6.6.0)"],"affectedPackageNames":["gradio"],"affectedPackageRefs":["pypi:gradio"],"affectedVendors":[],"affectedVendorsRaw":["Gradio"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Gradio server-side request forgery when loading a Space with gr.load()","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.07262,"epssCheckedAt":"2026-11-04T06:10:14.827Z","kevDateAdded":null,"advisoryAliases":["GHSA-jmh7-g254-2cq9"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:50:38.834Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2026-02-17T22:32:57.131Z","daysToFix":-10,"fixCheckedAt":"2026-10-29T21:40:24.341Z","capecIds":["CAPEC-664"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"gradio","fixedVersion":"6.6.0","matchedVersion":"6.6.0","fixReleasedAt":"2026-02-17T22:32:57.131Z","daysToFix":-10,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:40:24.195Z"}]}}