{
 "id": "AIR-2022-0040",
 "slug": "cve-2021-43831-local-file-access-vulnerability-in-gradio-int",
 "title": "CVE-2021-43831: Local file access vulnerability in Gradio interface",
 "summary": "An arbitrary file read vulnerability exists in Gradio versions prior to 2.4.8 due to insecure static file serving. Attackers could access host files via exact relative paths when public links were active.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Gradio"
 ],
 "incident_date": "2022-01-21",
 "incident_date_precision": "day",
 "first_reported": "2021-12-15",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-43831",
   "publisher": "NVD",
   "title": "CVE-2021-43831: Gradio is an open source framework for building interactive machine learning models and demos.",
   "published_at": "2021-12-15"
  },
  {
   "url": "https://github.com/advisories/GHSA-rhq2-3vr9-6mcr",
   "publisher": "GitHub Advisory Database",
   "title": "CVE-2021-43831: Files on the host computer can be accessed from the Gradio interface",
   "published_at": "2022-01-21"
  }
 ],
 "source_count": 2,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_ghsa",
 "tags": [
  "CVE-2021-43831",
  "path_traversal",
  "gradio"
 ],
 "created_at": "2026-10-18T07:00:14.101Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}