CVSS 3.0
8.2 highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:HCVE-2024-10648
High (8.2) in gradio project gradio. EPSS 0.7% chance of exploitation in the next 30 days.
A path traversal vulnerability exists in the Gradio Audio component of gradio-app/gradio, as of version git 98cbcae. This vulnerability allows an attacker to control the format of the audio file, leading to arbitrary file content deletion. By manipulating the output format, an attacker can reset any file to an empty file, causing a denial of service (DOS) on the server.
Severity
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
- CWE
- CWE-29
- Published
- Modified
- Record from
- the NVD, synced
Affected
- gradio_project:gradio
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-pgfv-gvc5-prfg | PyPI | gradio | >=4.0.0 <=5.0.0b2 | no fix published |
| PYSEC-2026-1417 | PyPI | gradio | >=4.0.0 <=5.0.0b2 | no fix published |