An issue was discovered in gradio-app/gradio, where the `/component_server` endpoint improperly allows the invocation of any method on a `Component` class with attacker-controlled arguments. Specifically, by exploiting the `move_resource_to_block_cache()` method of the `Block` class, an attacker can copy any file on the filesystem to a temporary directory and subsequently retrieve it. This vulnerability enables unauthorized local file read access, posing a significant risk especially when the application is exposed to the internet via `launch(share=True)`, thereby allowing remote attackers to read files on the host machine. Furthermore, gradio apps hosted on `huggingface.co` are also affected, potentially leading to the exposure of sensitive information such as API keys and credentials stored in environment variables.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - An issue was discovered in gradio-app/gradio, where the `/component_server` endpoint improperly allows the
    invocation of any method on a `Component` class with attacker-controlled arguments. Specifically, by
    exploiting the `move_resource_to_block_cache()` method of the `Block` class, an attacker can copy any file
    on the filesystem to a temporary directory and subsequently retrieve it. This vulnerability enables
    unauthorized local file read access, posing a significant risk especially when the application is exposed
    to the internet via `launch(share=True)`, thereby allowing remote attackers to read files on the host
    machine. Furthermore, gradio apps hosted on `huggingface.co` are also affected, potentially leading to the
    exposure of sensitive information such as API keys and credentials stored in environment variables.
    (CVE-2024-1561)

The version of Gradio installed on the remote host is prior to 4.13.0. It is, therefore, affected by a local file access vulnerability. An issue was discovered in gradio-app/gradio, where the `/component_server` endpoint improperly allows the invocation of any method on a `Component` class with attacker-controlled arguments. Specifically, by exploiting the `move_resource_to_block_cache()` method of the `Block` class, an attacker can copy any file on the filesystem to a temporary directory and subsequently retrieve it. This vulnerability enables unauthorized local file read access, posing a significant risk especially when the application is exposed to the internet via `launch(share=True)`, thereby allowing remote attackers to read files on the host machine. Furthermore, gradio apps hosted on `huggingface.co` are also affected, potentially leading to the exposure of sensitive information such as API keys and credentials stored in environment variables.

  Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Gradio version 4.3 prior to 4.13 are vulnerable to an unauthenticated Local file read by calling arbitrary methods of Components class. This detection is included in the AI and LLM category.

ID	Name	Product	Family	Severity
415025	SCA: security update for gradio (GHSA-g9cj-cfpp-4g2x)	Tenable Cloud Security	SCA Checks	high
415025	SCA: security update for gradio (GHSA-g9cj-cfpp-4g2x)	Tenable Self-Hosted Container Security	SCA Checks	high
213709	Gradio < 4.13.0 Local File Access	Nessus	Artificial Intelligence	high
114409	Gradio 4.3 < 4.13 Local File Read	Web App Scanning	Artificial Intelligence	high

Detections

Analytics

CVE-2024-1561

high

Tenable Plugins

high

high

high

high