CVE-2024-47084: Gradio CORS origin validation flaw allows cross-site requests

Summary

CVE-2024-47084 affects Gradio, an open-source Python package for quick prototyping. The Gradio server fails to validate the request origin when a cookie is present, so a website an attacker controls can send unauthorized requests to a local Gradio server. An attacker could upload files, steal authentication tokens and access user data if a victim visits the malicious site while logged into Gradio. The issue affects users who deployed Gradio locally with basic authentication.

Mitigation

Upgrade to gradio>4.44. As a workaround, manually enforce stricter CORS origin validation by modifying the CustomCORSMiddleware class in the local Gradio server code, bypassing the condition that skips CORS validation for requests containing cookies.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• gradioPyPILLM dependency since 2023-03-14 · 11 tracked dependents

Related items

• MediumCVE-2026-121936: easyVoice server-side request forgery through openaiBaseUrl in /api/v1/ttsSimilar attack · NVD/CVE Database
• MediumCVE-2026-118628: MLflow get-artifacts server-side request forgery information disclosureSimilar attack · NVD/CVE Database
• HighCVE-2026-118625: MLflow Tracking Server privilege escalation via get_endpointsSimilar attack · NVD/CVE Database
• InfoWhen trust becomes the payload: Inside the threats, etc quarterly reportSimilar attack · Elastic Security Labs
• MediumCritical Langflow flaws enable authentication bypass and RCESimilar attack · CSO Online