Veille CVE
CVE-2026-10783
2.5 FaibleDescription
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch.
Produits concernés
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 4.0 | 1.1 Faible | cna@vuldb.com | CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| 3.1 | 2.5 Faible | cna@vuldb.com | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N |
| 2.0 | 1.0 Faible | cna@vuldb.com | AV:L/AC:H/Au:S/C:P/I:N/A:N |
Faiblesses (CWE)
Références
- https://github.com/gradio-app/gradio/ Product
- https://github.com/gradio-app/gradio/issues/13395 ExploitIssue Tracking
- https://github.com/gradio-app/gradio/pull/13394 Issue TrackingPatch
- https://vuldb.com/cve/CVE-2026-10783 Third Party AdvisoryVDB Entry
- https://vuldb.com/submit/831451 Third Party AdvisoryVDB Entry
- https://vuldb.com/vuln/368140 Third Party AdvisoryVDB Entry
- https://vuldb.com/vuln/368140/cti Permissions RequiredVDB Entry