CVE-2024-47867: Gradio lack of integrity check on downloaded FRP client

Summary

Gradio, an open-source Python package for quick prototyping, does not verify the integrity of the FRP client it downloads for its sharing mechanism. The Gradio server does not check the file's checksum or signature, so an attacker who gains access to the remote URL can modify the binary without detection and introduce malicious code. Users of the sharing mechanism that relies on the FRP client are affected.

Mitigation

There is no direct workaround for this issue without upgrading. Users can manually validate the integrity of the downloaded FRP client by implementing checksum or signature verification in their own environment.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• gradioPyPILLM dependency since 2023-03-14 · 11 tracked dependents

Related items

• MediumResearchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak ToolkitSimilar attack · The Hacker News
• InfoTop agent skill security resources — November 2026Similar attack · Adversa AI Blog
• HighCVE-2026-118627: MLflow SHAP load_explainer untrusted deserialization enables code executionSimilar attack · NVD/CVE Database
• HighCVE-2026-118623: MLflow PickleEvaluationArtifact remote code execution via untrusted pickleSimilar attack · NVD/CVE Database
• HighCVE-2026-88968: Claude Code Edit tool symlink race overwrites files outside workspace on macOSSimilar attack · NVD/CVE Database