CVE-2025-48889
Medium
Description
Gradio is an open-source Python package that allows quick building of demos and web application for machine learning models, API, or any arbitrary Python function. Prior to version 5.31.0, an arbitrary file copy vulnerability in Gradio's flagging feature allows unauthenticated attackers to copy any readable file from the server's filesystem. While attackers can't read these copied files, they can cause DoS by copying large files (like /dev/urandom) to fill disk space. This issue has been patched in version 5.31.0.
SeverityMedium
CVSS5.3
Exploit probability—
ProductGradio
PublishedMay 30, 2025
First seenMay 30, 2025
Weakness typeCWE-434Unrestricted upload of dangerous file type
How to fix
Update
- gradio_project gradio5.31.0 or later
- gradio5.31.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gradio_project gradio | 5.25.2 ≤ v < 5.31.0 | 5.31.0 |
| gradioPyPI | v < 5.31.0, 5.25.2 ≤ v < 5.31.0 | 5.31.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.