LowVulnerability
CVE-2025-5320: gradio-app gradio CORS origin validation flaw allows privilege escalation
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2025-5320
- Published
- Record updated
- Affected
- gradio >= 5.0.0, <= 5.29.1
- Fixed in
- No fixed version was stated when the source was last read.
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.3%
Summary
CVE-2025-5320 is a vulnerability classified as problematic in gradio-app gradio up to 5.29.1. It affects the function is_valid_origin of the CORS Handler component, where manipulating the argument localhost_aliases leads to erweiterte Rechte (extended privileges). The attack can be initiated remotely, is rated high in complexity and difficult to exploit, and the exploit has been publicly disclosed. The vendor was contacted early but did not respond.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Affected packages in the Exposure Registry
Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.
- gradioPyPILLM dependency since 2023-03-14 · 11 tracked dependents
Related items
- HighCVE-2026-119120: Crawl4AI Docker API lets clients choose the HuggingFace model it loadsSame vendor · NVD/CVE Database
- HighGHSA-wf6j-7hvr-gr93: Hydra legacy target blacklist permits unsafe PyYAML loadingSame vendor · Hugging Face Security Advisories
- MediumCVE-2026-100653: vLLM unpinned Hugging Face artifact loads for FunAudioChat and Tarsier2Same vendor · NVD/CVE Database
- HighGHSA-3hmm-rh5q-gwwr: LMDeploy vulnerable to arbitrary code execution via eval() of untrusted quant_dtype in model config loadingSame vendor · Hugging Face Security Advisories
- MediumCVE-2026-80047: Hugging Face Transformers writes remote Python files to disk before trust checkSame vendor · NVD/CVE Database