Log in Start free

Vulnerability · Published Jun 3, 2026 · Assigned by VulDB

CVE-2026-10783gradio-app gradio Audio Cache Key save_audio_to_cache weak hash

Low 2.5

In plain English

A low-severity broken cryptography in gradio from gradio-app. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 1% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)2.5Low
Exploit odds (30 days)0.1%top 98.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
PyPIgradio6.15.1GHSA-6655-8ph2-63j3
PyPIgradiono fix listedPYSEC-2026-211

Affected products (as reported)

VendorProductVersions
gradio-app gradio 6.14.0

Weakness: CWE-328, CWE-327 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C

References