CVE-2025-48889: Gradio Arbitrary File Copy Vulnerability

# CVE-2025-48889: Gradio Arbitrary File Copy Vulnerability

https://gcdradar.vercel.app/incidents/cve-2025-48889-gradio-arbitrary-file-copy-vulnerability · AIR-2025-0293 · closed 2025-05-29

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability)
- Fix status: Fix status unknown
- First reported: 2025-05-29
- AI role: Attack on AI
- Products: Gradio
- CVE ids: CVE-2025-48889
- CVSS: 5.3

## Summary

An arbitrary file copy vulnerability in Gradio allows unauthenticated attackers to read or copy files from the server's filesystem. The flaw can be triggered via crafted API requests to cause denial of service by filling disk space.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2025-05-30: CVE-2025-48889: Gradio is an open-source Python package that allows quick building of demos and web application for machine learning models, API,… (https://nvd.nist.gov/vuln/detail/CVE-2025-48889)
- 2025-05-29: CVE-2025-48889: Gradio Allows Unauthorized File Copy via Path Manipulation (https://github.com/advisories/GHSA-8jw3-6x8j-v96g)

## Sources

- 2025-05-29 GitHub Advisory Database: CVE-2025-48889: Gradio Allows Unauthorized File Copy via Path Manipulation https://github.com/advisories/GHSA-8jw3-6x8j-v96g
- 2025-05-30 NVD: CVE-2025-48889: Gradio is an open-source Python package that allows quick building of demos and web application for machine learning models, API,… https://nvd.nist.gov/vuln/detail/CVE-2025-48889

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.