CVE-2024-34510

Gradio allows credential leakage on Windows

7.5 HighFix available

Gradio before 4.20 allows credential leakage on Windows.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: None

Exploit likelihood

0.67%Up 0.6 points since May 6, 2024

What each source reports

CVE List Score used 7.5

Gradio before 4.20 allows credential leakage on Windows.

Record: CVE-2024-34510
CVSS 3.1: 7.5 HighCVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:N/S:U/UI:N
Weakness: CWE-116
Updated: 2026-11-02

EUVDEUVD-2024-35150 7.5

Gradio before 4.20 allows credential leakage on Windows.

Record: EUVD-2024-35150
CVSS 3.1: 7.5 HighCVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:N/S:U/UI:N
Updated: 2026-11-03

GitHub AdvisoriesGHSA-rvfh-h6c7-fc3c 7.5

Gradio allows credential leakage on Windows

Gradio before 4.20 allows credential leakage on Windows.

Record: GHSA-rvfh-h6c7-fc3c
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-116
Updated: 2026-11-02

NVD 7.5

Gradio before 4.20 allows credential leakage on Windows.

Record: CVE-2024-34510
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-116
Updated: 2026-11-02

OSV 7.5

Gradio before 4.20 allows credential leakage on Windows.

Record: CVE-2024-34510
CVSS 3.1: 7.5 HighCVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:N/S:U/UI:N
Updated: 2026-11-02

OSVGHSA-rvfh-h6c7-fc3c 7.5

Gradio allows credential leakage on Windows

Gradio before 4.20 allows credential leakage on Windows.

Record: GHSA-rvfh-h6c7-fc3c
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-116
Updated: 2026-11-02

OSVPYSEC-2024-255 No score

Gradio before 4.20 allows credential leakage on Windows.

Record: PYSEC-2024-255
Updated: 2026-11-02

Affected products

gradio project gradio

Affected packages

Affected packages
Package	Affected	Fixed
`gradio` PyPI	before 4.20.0	4.20.0
`gradio` PyPI	before 4.20.0, plus listed versions 0.1.00.1.10.1.20.1.30.1.4 Show 45 moreShow less 0.1.50.1.60.1.70.1.80.1.90.2.00.2.10.3.00.3.10.3.20.3.30.3.40.3.50.4.00.4.10.4.20.4.40.5.00.7.00.7.10.7.20.7.30.7.40.7.50.7.60.7.70.7.80.8.00.8.10.9.00.9.10.9.20.9.30.9.40.9.50.9.60.9.70.9.80.9.9.20.9.9.30.9.9.50.9.9.60.9.9.70.9.9.80.9.9.9	4.20.0

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-34510 is a high vulnerability (CVSS 7.5) in Gradio Project Gradio, published May 5, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.67%, the 52nd percentile. Fixed in gradio 4.20.0.

References

This page doesn't list everything

Left out here: 459 versions. The JSON record has them.