CVE-2024-1561: Gradio local file read through /component_server endpoint

Summary

The /component_server endpoint in gradio-app/gradio lets callers invoke any method on a Component class with attacker-controlled arguments. Using the move_resource_to_block_cache() method of the Block class, an attacker can copy any file on the filesystem to a temporary directory and then retrieve it, enabling unauthorized local file read. The flaw poses a significant risk when apps are exposed via launch(share=True), and gradio apps hosted on huggingface.co are also affected, potentially exposing API keys and credentials stored in environment variables.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• gradioPyPILLM dependency since 2023-03-14 · 11 tracked dependents

Related items

• HighCVE-2026-119120: Crawl4AI Docker API lets clients choose the HuggingFace model it loadsSame vendor · NVD/CVE Database
• HighGHSA-wf6j-7hvr-gr93: Hydra legacy target blacklist permits unsafe PyYAML loadingSame vendor · Hugging Face Security Advisories
• MediumCVE-2026-100653: vLLM unpinned Hugging Face artifact loads for FunAudioChat and Tarsier2Same vendor · NVD/CVE Database
• HighGHSA-3hmm-rh5q-gwwr: LMDeploy vulnerable to arbitrary code execution via eval() of untrusted quant_dtype in model config loadingSame vendor · Hugging Face Security Advisories
• MediumCVE-2026-80047: Hugging Face Transformers writes remote Python files to disk before trust checkSame vendor · NVD/CVE Database