CVE-2024-12217: Gradio Path Traversal vulnerability

March 20, 2025 (updated March 21, 2025)

A vulnerability in the gradio-app/gradio repository, version git 67e4044, allows for path traversal on Windows OS. The implementation of the blocked_path functionality, which is intended to disallow users from reading certain files, is flawed. Specifically, while the application correctly blocks access to paths like ‘C:/tmp/secret.txt’, it fails to block access when using NTFS Alternate Data Streams (ADS) syntax, such as ‘C:/tmp/secret.txt::$DATA’. This flaw can lead to unauthorized reading of blocked file paths.

References

github.com/advisories/GHSA-prpg-p95c-32fv
github.com/gradio-app/gradio
github.com/gradio-app/gradio/blob/67e4044c9ca8358eceeb1fa72fa415df03397d20/gradio/utils.py
huntr.com/bounties/0439bf3d-cb38-43a5-8314-0fadf85cc5a0
nvd.nist.gov/vuln/detail/CVE-2024-12217

Code Behaviors & Features

Detect and mitigate CVE-2024-12217 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →