CVE-2024-51751

Summary

CVE-2024-51751 is a vulnerability affecting the open-source Python package Gradio. If File or UploadButton components are used to preview file content in Gradio applications, an attacker can potentially read arbitrary files from the application server. This issue has been addressed in version 5.5.0 and all users are encouraged to upgrade as soon as possible. At present, there are no known workarounds for this vulnerability. This weakness could lead to information disclosure, potentially putting sensitive data at risk. Gradio users should prioritize upgrading to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.