PyPI/gradio CVE-2025-23042: high 7.5, EPSS 1.00%

Gradio Blocked Path ACL Bypass Vulnerability

Action: Upgrade gradio to 5.11.0 or later.

pip install gradio==5.11.0

Affected

Fixed versions

Sources

• osv: GHSA-j2jg-fq62-7c3h
• nvd: CVE-2025-23042
• https://github.com/gradio-app/gradio/security/advisories/GHSA-j2jg-fq62-7c3h
• https://github.com/gradio-app/gradio/commit/6b63fdec441b5c9bf910f910a2505d8defbb6bf8
• https://github.com/gradio-app/gradio
• https://github.com/gradio-app/gradio/releases/tag/gradio%405.11.0
• https://github.com/pypa/advisory-database/tree/main/vulns/gradio/PYSEC-2025-118.yaml

CVE-2025-23042 · published 2025-01-14T16:32:22Z · modified 2026-06-05T18:00:15.299808781Z · JSON