Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment.
{
"cna_assigner": "VulnCheck",
"cwe_ids": [
"CWE-384"
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/48xxx/CVE-2026-48545.json"
}{
"extracted_events": [
{
"cpe": "cpe:2.3:a:gradio_project:gradio:*:*:*:*:*:python:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "6.15.0"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "feb7237d01f359d2ad4ee42d00344e61692b3b39"
}
],
"source": "REFERENCES_COMMIT"
},
{
"original_tag": "gradio@6.15.0",
"range": [
{
"fixed": "73f7de9bff544643fa7e2acd39cc288f762cd02a"
}
],
"source": "REFERENCES_TAG"
}
]
}