CVE-2026-48545: Gradio cookie injection through shared proxy HTTP client

Summary

CVE-2026-48545 affects Gradio before version 6.15.0. A cookie injection flaw in the shared module-level HTTP client used by the reverse proxy endpoint lets remote attackers, who control any HF Space, return a parent-domain cookie that is stored and replayed into proxy requests to other legitimate Spaces, enabling cross-Space session fixation. All users of the same Gradio deployment are affected. VulnCheck rates it CVSS 4.0 7.6 (HIGH); NVD has not yet provided an assessment.

Mitigation

Fixed in 6.15.0 (release tag gradio@6.15.0).

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• gradioPyPILLM dependency since 2023-03-14 · 11 tracked dependents

Related items

• MediumCVE-2026-100653: vLLM unpinned Hugging Face artifact loads for FunAudioChat and Tarsier2Same vendor · NVD/CVE Database
• HighGHSA-3hmm-rh5q-gwwr: LMDeploy vulnerable to arbitrary code execution via eval() of untrusted quant_dtype in model config loadingSame vendor · Hugging Face Security Advisories
• MediumCVE-2026-80047: Hugging Face Transformers writes remote Python files to disk before trust checkSame vendor · NVD/CVE Database
• HighCVE-2026-58474: whichllm code injection in run and snippet commands via GGUF filenamesSame vendor · NVD/CVE Database
• HighCVE-2026-79784: Vocos class instantiation from configuration via from_pretrainedSame vendor · NVD/CVE Database