PT-2026-44008 · Gradio · Gradio

Yu Sun · CVE-2026-48545 · Published 2026-05-27 · Updated 2026-06-02

Positive Technologies (AI Summary)

CVSS v4.0

7.6

High

Base vector

AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Gradio versions prior to 6.15.0

Description A cookie injection issue exists due to a shared module-level HTTP client used across all users in the reverse proxy endpoint. This allows remote attackers who control any HF Space to return a parent-domain cookie. The shared client stores this cookie and automatically replays it into subsequent proxy requests to other legitimate Spaces, enabling cross-Space session fixation for all users of the same Gradio deployment.

Recommendations Update to version 6.15.0 or later.

Exploit

Fix

Session Fixation

Weakness Enumeration

CWE-384

Related Identifiers

CVE-2026-48545

GHSA-7HP7-4P35-3CX2

PYSEC-2026-2178

Affected Products

Gradio

References · 15

• 🔥 https://github.com/gradio-app/gradio/issues/13369 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/48xxx/CVE-2026-48545.json · Exploit
• https://github.com/gradio-app/gradio/commit/feb7237d01f359d2ad4ee42d00344e61692b3b39 · Patch
• https://github.com/gradio-app/gradio/pull/13384 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-48545 · Security Note
• https://osv.dev/vulnerability/GHSA-7hp7-4p35-3cx2 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2026-2178 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-48545 · Vendor Advisory
• https://github.com/gradio-app/gradio · Note
• https://github.com/gradio-app/gradio/releases/tag/gradio%406.15.0 · Note
• https://github.com/gradio-app/gradio/releases/tag/gradio@6.15.0 · Note
• https://twitter.com/dailycve/status/2061616965710463022 · Twitter Post
• https://t.me/cveNotify/165561 · Telegram Post
• https://github.com/advisories/GHSA-7hp7-4p35-3cx2 · Note
• https://vulncheck.com/advisories/gradio-cookie-injection-via-shared-pro · Note