CVE-2022-24770: gradio CSV injection in flagged output files

Summary

Prior to version 2.8.11, the `gradio` library's flagging feature saves input and output data into a CSV file on the developer's computer without neutralizing formula elements. A user can therefore store arbitrary text such as commands in that file, and when a spreadsheet program like MS Excel opens it, those commands run automatically on the developer's machine.

Mitigation

Fixed in 2.8.11, which escapes the saved CSV with single quotes. Workaround: avoid opening CSV files generated by `gradio` with Excel or similar spreadsheet programs.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• gradioPyPILLM dependency since 2023-03-14 · 11 tracked dependents

Related items

• MediumCVE-2026-121936: easyVoice server-side request forgery through openaiBaseUrl in /api/v1/ttsSimilar attack · NVD/CVE Database
• MediumCVE-2026-118628: MLflow get-artifacts server-side request forgery information disclosureSimilar attack · NVD/CVE Database
• HighCVE-2026-118625: MLflow Tracking Server privilege escalation via get_endpointsSimilar attack · NVD/CVE Database
• InfoWhen trust becomes the payload: Inside the threats, etc quarterly reportSimilar attack · Elastic Security Labs
• MediumCritical Langflow flaws enable authentication bypass and RCESimilar attack · CSO Online