CVE-2025-48889: Gradio Allows Unauthorized File Copy via Path Manipulation

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2025-05-30 · updated 2026-06-17
Weakness: CWE-434

Description

Gradio is an open-source Python package that allows quick building of demos and web application for machine learning models, API, or any arbitrary Python function. Prior to version 5.31.0, an arbitrary file copy vulnerability in Gradio's flagging feature allows unauthenticated attackers to copy any readable file from the server's filesystem. While attackers can't read these copied files, they can cause DoS by copying large files (like /dev/urandom) to fill disk space. This issue has been patched in version 5.31.0.

Affected products

gradio-app gradio: from 5.25.2 before 5.31.0 — fixed in 5.31.0

How to fix

Upgrade to a fixed version: gradio-app gradio 5.31.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2025-48889 or the next vulnerability affects your stack