PT-2026-46072 · Gradio · Gradio

Dem0 · CVE-2026-10783 · Published 2026-06-03 · Updated 2026-07-22

Positive Technologies (AI Summary)

CVSS v3.1

2.5

Low

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions gradio-app gradio version 6.14.0

Description A security flaw exists in the Audio Cache Key Handler component. Specifically, the save audio to cache() function uses a weak hash, which can be manipulated. This issue requires a local position for exploitation and is characterized by high complexity and difficult exploitability.

Recommendations Deploy patch 13394 for version 6.14.0. As a temporary workaround, consider restricting the use of the save audio to cache() function until the patch is applied.

Exploit

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

CWE-328

Related Identifiers

CVE-2026-10783

GHSA-6655-8PH2-63J3

PYSEC-2026-211

Affected Products

Gradio

References · 20

• 🔥 https://github.com/gradio-app/gradio/issues/13395 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/10xxx/CVE-2026-10783.json · Exploit
• https://github.com/gradio-app/gradio/pull/13394 · Patch
• https://osv.dev/vulnerability/GHSA-6655-8ph2-63j3 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-10783 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2026-211 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-10783 · Security Note
• https://github.com/gradio-app/gradio · Note
• https://github.com/gradio-app/gradio/commit/1c609af6918b20d0b4347b9f41b04569d6adca24 · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/gradio/PYSEC-2026-211.yaml · Note
• https://t.me/cveNotify/213327 · Telegram Post
• https://github.com/advisories/GHSA-6655-8ph2-63j3 · Note
• https://vuldb.com/vuln/368140/cti · Note
• https://vuldb.com/cve/CVE-2026-10783 · Note
• https://t.me/cveNotify/165895 · Telegram Post