gcdRadar
archive/Patch now/AIR-2024-0235
closedclosed 4 Jun 2024Patch now2 Disclosed vulnerabilityAI

CVE-2024-4253: Gradio Repository Workflow Command Injection Vulnerability

Gradio

A command injection flaw exists within a Gradio functional test workflow due to improper sanitization of GitHub context information. This vulnerability could allow unauthorized repository modification or secrets exfiltration.

disclosed CVENo confirmed exploitation, so this record is tracked as a disclosed vulnerability and not counted as an incident. It moves into the counts if CISA or the vendor confirms exploitation. Why

CVSS
7.5
EPSS
0.02 · top 23% · 2026-11-13
EPSS scores by FIRST
fix status
Fix status unknown
first report
4 Jun 2024
last update
4 Jun 2024
CVE ids
CVE-2024-4253other records

Timeline · 1

  1. 4 Jun 2024CVE-2024-4253: A command injection vulnerability exists in the gradio-app/gradio repository, specifically within the 'test-functional.yml'…

Sources · 1

Advisories and databases

  1. 2024-06-04
    CVE-2024-4253: A command injection vulnerability exists in the gradio-app/gradio repository, specifically within the 'test-functional.yml'…
    NVD · nvd.nist.gov/vuln/detail/CVE-2024-4253

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

lane
Patch now
AI role
Attack on AI
categories
Infrastructure vulnerability
severity
2 · Disclosed vulnerability
fix status
Fix status unknown
targets
Framework / tooling
owasp llm top 10
LLM03:2025 Supply Chain
mitre atlas
no technique for these categories
dates
happened 4 Jun 2024 · first reported 4 Jun 2024
origin
NVD
Vulnerability record from NVD / the GitHub Advisory Database. This product uses the NVD API but is not endorsed or certified by the NVD.
record
confidence 0.95 · created 2026-10-18 10:04Z · updated 2026-10-18 10:04Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# CVE-2024-4253: Gradio Repository Workflow Command Injection Vulnerability

https://gcdradar.vercel.app/incidents/cve-2024-4253-gradio-repository-workflow-command-injection-v · AIR-2024-0235 · closed 2024-06-04

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability)
- Fix status: Fix status unknown
- First reported: 2024-06-04
- AI role: Attack on AI
- Products: Gradio
- CVE ids: CVE-2024-4253
- CVSS: 7.5

## Summary

A command injection flaw exists within a Gradio functional test workflow due to improper sanitization of GitHub context information. This vulnerability could allow unauthorized repository modification or secrets exfiltration.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2024-06-04: CVE-2024-4253: A command injection vulnerability exists in the gradio-app/gradio repository, specifically within the 'test-functional.yml'… (https://nvd.nist.gov/vuln/detail/CVE-2024-4253)

## Sources

- 2024-06-04 NVD: CVE-2024-4253: A command injection vulnerability exists in the gradio-app/gradio repository, specifically within the 'test-functional.yml'… https://nvd.nist.gov/vuln/detail/CVE-2024-4253

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. closed9.8
    Gradio CVE-2024-39236: Code injection vulnerability in Gradio component_meta.py

    Patch now · Disclosed · since 1 Jul 2024 · CVE-2024-39236

    AI
  2. closed8.6
    Gradio CVE-2024-4325: SSRF Vulnerability in Gradio

    Patch now · Disclosed · since 6 Jun 2024 · CVE-2024-4325

    AI
  3. closed7.1
    Gradio CVE-2024-4254: Gradio Website Deployment Workflow Secrets Exfiltration

    Patch now · Disclosed · since 4 Jun 2024 · CVE-2024-4254

    AI
  4. closed7.5
    Gradio CVE-2024-34510: Gradio credential leakage vulnerability on Windows

    Patch now · Disclosed · since 5 May 2024 · CVE-2024-34510

    AI
  5. closed6.5
    Gradio CVE-2024-34511: Gradio component server function handling flaw

    Patch now · Disclosed · since 5 May 2024 · CVE-2024-34511

    AI
  6. closed6.9
    Gradio CVE-2024-51751: Arbitrary file read vulnerability in Gradio components

    Patch now · Disclosed · since 6 Nov 2024 · CVE-2024-51751

    AI