AIKIDO-2026-503099
gradio is vulnerable to Open Redirect
49
Medium Risk
This Affects:
gradioTL;DR
The /gradio_api/file= endpoint accepts any HTTP or HTTPS URL as a path parameter and immediately returns a redirect to that URL without validation. Untrusted URLs can redirect users to arbitrary external sites, and because the client library follows redirects, a crafted file response can drive requests to internal endpoints such as cloud metadata services. This enables client-side server-side request forgery that can retrieve sensitive credentials such as instance role credentials. The fix restricts redirects to an allow-list and serves the URL through a request-forgery-safe proxy that validates the resolved host.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and your deployment serves or renders externally influenced FileData URLs through the /gradio_api/file= endpoint (for example a client or browser that follows the endpoint's redirects).
Background info
gradio is vulnerable to Open Redirect in versions 0.0.1 - 6.19.0.
How to fix this
Upgrade the gradio library to the patch version.
Links
GitHub Release
Related Issue
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant