← Vulnerability feed

Vulnerability record · CVE-2022-24770 · published 17 March 2022

CVE-2022-24770: Gradio project gradio csv injection vulnerability

Gradio Project · Gradio

`gradio` is an open source framework for building interactive machine learning models and demos. Prior to version 2.8.11, `gradio` suffers from Improper Neutralization of Formula Elements in a CSV File. The `gradio` library has a flagging functionality which saves input/output data into a CSV file on the developer's computer. This can allow a user to save arbitrary text into the CSV file, such as commands. If a program like MS Excel opens such a file, then it automatically runs these commands, which could lead to arbitrary commands running on the user's computer. The problem has been patched as of `2.8.11`, which escapes the saved csv with single quotes. As a workaround, avoid opening csv files generated by `gradio` with Excel or similar spreadsheet programs.

8.8 CVSS 3.1 High EPSS 1.3% · top 30.8% CWE-1236 · CSV injection
8.8CVSS 3.1 base score, v2 6.8
1.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

`gradio` is an open source framework for building interactive machine learning models and demos. Prior to version 2.8.11, `gradio` suffers from Improper Neutralization of Formula Elements in a CSV File. The `gradio` library has a flagging functionality which saves input/output data into a CSV file on the developer's computer. This can allow a user to save arbitrary text into the CSV file, such as commands. If a program like MS Excel opens such a file, then it automatically runs these commands, which could lead to arbitrary commands running on the user's computer. The problem has been patched as of `2.8.11`, which escapes the saved csv with single quotes. As a workaround, avoid opening csv files generated by `gradio` with Excel or similar spreadsheet programs.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/gradio-app/gradio/commit/80fea89117358ee105973453fdc402398ae20239 PatchThird Party Advisory
https://github.com/gradio-app/gradio/pull/817 PatchThird Party Advisory
https://github.com/gradio-app/gradio/security/advisories/GHSA-f8xq-q7px-wg8c Third Party Advisory
https://github.com/gradio-app/gradio/commit/80fea89117358ee105973453fdc402398ae20239 PatchThird Party Advisory
https://github.com/gradio-app/gradio/pull/817 PatchThird Party Advisory
https://github.com/gradio-app/gradio/security/advisories/GHSA-f8xq-q7px-wg8c Third Party Advisory

Track CVE-2022-24770 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2024-39236Gradio project gradio code injection vulnerabilityGradio v4.36.1 was discovered to contain a code injection vulnerability via the component /gradio/component_meta.py. This vulnerability is triggered …EPSS 0.87%9.8CVE-2023-25823Gradio project gradio hard-coded credentials vulnerabilityGradio is an open-source Python library to build machine learning and data science demos and web applications. Versions prior to 3.13.1 contain Use o…EPSS 0.55%9.4CVE-2024-0964Gradio project gradio path traversal vulnerabilityA local file include could be remotely triggered in Gradio due to a vulnerable user-supplied JSON value in an API request.EPSS 0.96%9.1CVE-2024-4253Gradio project gradio os command injection vulnerabilityA command injection vulnerability exists in the gradio-app/gradio repository, specifically within the 'test-functional.yml' workflow. The vulnerabili…EPSS 1.7%9.1CVE-2023-34239Gradio project gradio improper input validation vulnerabilityGradio is an open-source Python library that is used to build machine learning and data science. Due to a lack of path filtering Gradio does not prop…EPSS 0.65%8.7CVE-2026-49119Gradio project gradio path traversal vulnerabilityGradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers…EPSS 0.93%8.7CVE-2025-23042Gradio project gradio improper authorization vulnerabilityGradio is an open-source Python package that allows quick building of demos and web application for machine learning models, API, or any arbitrary Py…EPSS 0.98%8.6CVE-2026-28416Gradio project gradio server-side request forgery (ssrf) vulnerabilityGradio is an open-source Python package designed for quick prototyping. Prior to version 6.6.0, a Server-Side Request Forgery (SSRF) vulnerability in…EPSS 0.35%

Source: NIST National Vulnerability Database (record CVE-2022-24770), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.