k3ystr0k3r/cve-2024-1561CVE-2024-1561 - Gradio Arbitrary File Read
CVE-2024-1561 is an arbitrary file read vulnerability affecting Gradio versions prior to 4.13.0. Gradio is a popular Python framework used to quickly build web interfaces for machine learning models and AI applications.
The vulnerability exists because the /component_server endpoint does not properly restrict which methods of the internal Component class can be invoked. An attacker can abuse this behavior to call methods that were never intended to be exposed over HTTP.
One of these methods, move_resource_to_block_cache, allows a file from the local filesystem to be copied into Gradio's temporary cache directory. Once the file has been copied, it becomes accessible through the /file endpoint, allowing an attacker to retrieve its contents.
Although the vulnerability does not directly provide remote code execution, it can expose sensitive files from the server and may be leveraged to gather credentials, configuration files, API keys, tokens, or other information useful for further attacks.
Versions 4.13.0 and later contain the necessary security checks to prevent arbitrary method invocation.
The issue stems from insufficient validation within the /component_server endpoint.
Instead of limiting requests to a safe list of callable functions, Gradio allowed attackers to specify arbitrary method names belonging to a component instance.
Because the internal method:
move_resource_to_block_cache()
accepts a filesystem path as input, an attacker can instruct the application to cache any readable file on the server.
Once cached, the file is exposed through Gradio's normal file serving functionality.
A successful attack generally follows these steps:
/config endpoint./component_server.move_resource_to_block_cache method./etc/passwd)./file endpoint.This process allows arbitrary files readable by the Gradio process to be retrieved remotely.
POST /component_server HTTP/1.1
Host: target
Content-Type: application/json
{
"component_id": "3",
"data": "/etc/passwd",
"fn_name": "move_resource_to_block_cache",
"session_hash": "aaaaaaaaaaa"
}
If successful, Gradio returns the location of the cached file.
The attacker can then request:
GET /file=/tmp/gradio/<cached-file>/passwd HTTP/1.1
Host: target
to retrieve the contents.
Successful exploitation may allow an attacker to read sensitive files including:
/etc/passwd.env)The impact depends on the privileges of the Gradio application.
To remediate this vulnerability:
This repository is provided for educational purposes, security research, and authorized penetration testing only. Always obtain explicit permission before testing systems that you do not own or have authorization to assess.