{"data":{"id":"f6494603-8755-432e-b36b-36336f71a297","title":"CVE-2024-47164: Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to the **bypass of…","summary":"Gradio, an open-source Python package for quick prototyping, has a bypass of directory traversal checks in its `is_in_or_equal` function. The function, meant to confirm a file sits inside a given directory, can be defeated with payloads that use `..` parent directory sequences, letting an attacker reach restricted files. The flaw mainly affects users who rely on Gradio's blocklist or directory access validation, especially around file uploads, and exploitation is described as difficult.","solution":"Upgrade to `gradio>=5.0`. As a workaround, manually sanitize and normalize file paths before passing them to `is_in_or_equal`, ensuring all paths are properly resolved and absolute.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-47164","publishedAt":"2024-10-11T02:15:10.437Z","cveId":"CVE-2024-47164","cweIds":["CWE-22"],"cvssScore":"6.5","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["gradio@< 5.0.0 (fixed: 5.0.0)"],"affectedPackageNames":["gradio"],"affectedPackageRefs":["pypi:gradio"],"affectedVendors":[],"affectedVendorsRaw":["Gradio"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Gradio directory traversal check bypass in is_in_or_equal function","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00705,"epssCheckedAt":"2026-11-04T06:10:13.536Z","kevDateAdded":null,"advisoryAliases":["GHSA-77xq-6g77-h274"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:55:06.693Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2024-10-09T13:04:16.634Z","daysToFix":-2,"fixCheckedAt":"2026-10-29T21:45:27.271Z","capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"gradio","fixedVersion":"5.0.0","matchedVersion":"5.0.0","fixReleasedAt":"2024-10-09T13:04:16.634Z","daysToFix":-2,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:45:27.118Z"}]}}