Skip to content
Submit incident
AII-1001-96969
ConfirmedA court, a regulator or the organization itself has stated the core facts, or the record cites a court or regulator source.

Gradio allows unauthorized file copy via path manipulation

Gradio published a security advisory for CVE-2025-48889, a moderate severity vulnerability in versions 5.25.2 and earlier that allows unauthorized file copying through path manipulation. The issue was patched in version 5.31.0.

29 May 2025 · Gradio · Security and cyberattacks
29 May 2025

Drafted by Raidu Incident Detection, an automated system.

AII-1001-969692 sources ↓
Quick facts
Organization
Gradio (subject)
Category
Security and cyberattacks
Source
github.com
Date
29 May 2025
Drafted by
Raidu Incident Detection

What happened

Gradio versions 5.25.2 and earlier contained a vulnerability allowing unauthorized file copy through path manipulation (CVE-2025-48889). The issue was patched in version 5.31.0.

Reported impact

The vulnerability has moderate severity with a CVSS score of 5.3, affecting availability.

Classification

Organization
Gradio (subject)
Category
Security and cyberattacks
Industry
IT infrastructure and hosting
Harm status
Potential harm
Intent
Unknown
Timing
Unknown
AI systems
Gradio

Sources and evidence

This record was researched and written by the Index, based on the following original reporting.

github.com
https://github.com/gradio-app/gradio/security/advisories/GHSA-8jw3-6x8j-v96g
cve.org
NVD entry