PT-2026-46072 · Gradio App · Gradio

Dem0 · Published 2026-06-03 · Updated 2026-06-04 · CVE-2026-10783

Mitre

CVSS v3.1

2.5

Low

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save audio to cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch.

Exploit

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-328

CWE-327

Related Identifiers

CVE-2026-10783

Affected Products

Gradio

References · 8

• 🔥 https://github.com/gradio-app/gradio/issues/13395 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-10783 · Security Note
• https://github.com/gradio-app/gradio/pull/13394 · Patch
• https://vuldb.com/vuln/368140/cti · Note
• https://vuldb.com/vuln/368140 · Note
• https://vuldb.com/submit/831451 · Note
• https://github.com/gradio-app/gradio · Note
• https://vuldb.com/cve/CVE-2026-10783 · Note