CVE-2024-39236: Gradio Project Gradio

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Gradio v4.36.1 was discovered to contain a code injection vulnerability via the component /gradio/component_meta.py. This vulnerability is triggered via a crafted input. NOTE: the supplier disputes this because the report is about a user attacking himself.

Affected products

• Gradio Project Gradio: version 4.36.1 only

Published 2024-07-01. Last modified 2026-06-17.