CVE-2026-28415
published 2026-02-27CVE-2026-28415: Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.6.0, the _redirect_to_target() function in Gradio's OAuth flow…
PriorityP426medium4.7CVSS 3.1
AVNACLPRNUIRSCCNILAN
EPSS
0.23%
13.9th percentile
Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.6.0, the _redirect_to_target() function in Gradio's OAuth flow accepts an unvalidated _target_url query parameter, allowing redirection to arbitrary external URLs. This affects the /logout and /login/callback endpoints on Gradio apps with OAuth enabled (i.e. apps running on Hugging Face Spaces with gr.LoginButton). Starting in version 6.6.0, the _target_url parameter is sanitized to only use the path, query, and fragment, stripping any scheme or host.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gradio-app | gradio | < 6.6.0 | 6.6.0 |
| gradio_project | gradio | < 6.6.0 | 6.6.0 |
| gradio_project | gradio | >= 0 < 6.6.0 | 6.6.0 |
CVSS provenance
nvdv3.14.7MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
vendor_redhat4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Gradio has an Open Redirect in its OAuth Flow
osv·2026-03-01
CVE-2026-28415 [MEDIUM] Gradio has an Open Redirect in its OAuth Flow
Gradio has an Open Redirect in its OAuth Flow
# Summary
The _redirect_to_target() function in Gradio's OAuth flow accepts an unvalidated _target_url query parameter, allowing redirection to arbitrary external URLs. This affects the /logout and /login/callback endpoints on Gradio apps with OAuth enabled (i.e. apps running on Hugging Face Spaces with gr.LoginButton).
## Details
```python
def _redirect_to_target(request, default_target="/"):
target = request.query_params.get("_target_url", default_target)
return RedirectResponse(target) # No validation
```
An attacker can craft a URL like https://my-space.hf.space/logout?_target_url=https://evil.com/phishing that redirects the user to an external site after logout. Because the URL originates from a trusted hf.space domain, users are more
GHSA
Gradio has an Open Redirect in its OAuth Flow
ghsa·2026-03-01
CVE-2026-28415 [MEDIUM] CWE-200 Gradio has an Open Redirect in its OAuth Flow
Gradio has an Open Redirect in its OAuth Flow
# Summary
The _redirect_to_target() function in Gradio's OAuth flow accepts an unvalidated _target_url query parameter, allowing redirection to arbitrary external URLs. This affects the /logout and /login/callback endpoints on Gradio apps with OAuth enabled (i.e. apps running on Hugging Face Spaces with gr.LoginButton).
## Details
```python
def _redirect_to_target(request, default_target="/"):
target = request.query_params.get("_target_url", default_target)
return RedirectResponse(target) # No validation
```
An attacker can craft a URL like https://my-space.hf.space/logout?_target_url=https://evil.com/phishing that redirects the user to an external site after logout. Because the URL originates from a trusted hf.space domain, users are more
Red Hat
Gradio: Gradio: Open Redirect vulnerability allows redirection to arbitrary external URLs.
vendor_redhat·2026-02-27·CVSS 4.3
CVE-2026-28415 [MEDIUM] CWE-601 Gradio: Gradio: Open Redirect vulnerability allows redirection to arbitrary external URLs.
Gradio: Gradio: Open Redirect vulnerability allows redirection to arbitrary external URLs.
Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.6.0, the _redirect_to_target() function in Gradio's OAuth flow accepts an unvalidated _target_url query parameter, allowing redirection to arbitrary external URLs. This affects the /logout and /login/callback endpoints on Gradio apps with OAuth enabled (i.e. apps running on Hugging Face Spaces with gr.LoginButton). Starting in version 6.6.0, the _target_url parameter is sanitized to only use the path, query, and fragment, stripping any scheme or host.
A flaw was found in Gradio, an open-source Python package. The _redirect_to_target() function in Gradio's OAuth flow accepts an unvalidated _target_url query pa
No detection rules found.
No public exploits indexed.
Wiz
CVE-2026-28414 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 5.3
CVE-2026-28414 [MEDIUM] CVE-2026-28414 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-28414 :
Gradio vulnerability analysis and mitigation
os.path.isabs
/windows/win.ini
Source : NVD
## 7.5
Score
Published February 27, 2026
Severity HIGH
CNA Score 7.5
Affected Technologies
Gradio
Has Public Exploit Yes
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 79.3
Exploitation Probability (EPSS) 1.3
Affected packages and libraries
gradio
Sources
NVD
pip Severity HIGH Has Fix Added at: Mar 02, 2026
## Get a CVE risk assessment
Get a prioritized view of CVEs in your cloud—so you can focus on what's exploitable, not just what's listed.
## Related Gradio vulnerabilities:
CVE ID
Severity
Score
Technologies
Component name
CISA KEV exploit
Has fix
Published date
CVE-2026-28
Wiz
CVE-2026-28415 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 5.3
CVE-2026-28415 [MEDIUM] CVE-2026-28415 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-28415 :
Gradio vulnerability analysis and mitigation
Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.6.0, the _redirect_to_target() function in Gradio's OAuth flow accepts an unvalidated _target_url query parameter, allowing redirection to arbitrary external URLs. This affects the /logout and /login/callback endpoints on Gradio apps with OAuth enabled (i.e. apps running on Hugging Face Spaces with gr.LoginButton). Starting in version 6.6.0, the _target_url parameter is sanitized to only use the path, query, and fragment, stripping any scheme or host.
Source : NVD
## 4.7
Score
Published February 27, 2026
Severity MEDIUM
CNA Score 4.3
Affected Technologies
Gradio
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Relea
Wiz
CVE-2026-27167 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 5.3
CVE-2026-27167 [MEDIUM] CVE-2026-27167 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-27167 :
Gradio vulnerability analysis and mitigation
gr.LoginButton
/login/huggingface
huggingface_hub.get_token()
"-v4"
Source : NVD
## 5.9
Score
Published February 27, 2026
Severity MEDIUM
CNA Score N/A
Affected Technologies
Gradio
Has Public Exploit Yes
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 5.5
Exploitation Probability (EPSS) N/A
Affected packages and libraries
gradio
Sources
NVD
pip Severity LOW Has Fix Added at: Mar 02, 2026
## Get a CVE risk assessment
Get a prioritized view of CVEs in your cloud—so you can focus on what's exploitable, not just what's listed.
## Related Gradio vulnerabilities:
CVE ID
Severity
Score
Technologies
Component name
CISA KEV exploi
Wiz
CVE-2026-28416 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 5.3
CVE-2026-28416 [MEDIUM] CVE-2026-28416 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-28416 :
Gradio vulnerability analysis and mitigation
gr.load()
proxy_url
Source : NVD
## 8.6
Score
Published February 27, 2026
Severity HIGH
CNA Score 8.2
Affected Technologies
Gradio
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 4.1
Exploitation Probability (EPSS) N/A
Affected packages and libraries
gradio
Sources
NVD
pip Severity HIGH Has Fix Added at: Mar 02, 2026
## Get a CVE risk assessment
Get a prioritized view of CVEs in your cloud—so you can focus on what's exploitable, not just what's listed.
## Related Gradio vulnerabilities:
CVE ID
Severity
Score
Technologies
Component name
CISA KEV exploit
Has fix
Published date
CVE-2026-28416
HIGH
8.
2026-02-27
Published