Lack of integrity check on the downloaded FRP client in Gradio

Vulnerability

Details

CVE-2024-47867 describes a lack of integrity check on the FRP (Fast Reverse Proxy) client downloaded by the Gradio server when using its sharing mechanism. The server does not verify the binary's checksum or cryptographic signature before execution, meaning any tampering with the downloaded file goes undetected [1][2].

Exploitation

Scenario

An attacker who can intercept the remote URL from which the FRP client is fetched—for example, through a man-in-the-middle (MITM) attack or by compromising the download source—could replace the legitimate binary with a malicious one. The Gradio server then executes the tampered client, without any integrity verification [4].

Impact

Users who rely on Gradio's sharing feature (which downloads the FRP client to create a public tunnel) are at risk. A malicious binary could execute arbitrary code on the user's machine, potentially leading to data exfiltration, system compromise, or further network attacks. The vulnerability is particularly critical for users deploying Gradio in production or sharing sensitive models [2].

Mitigation

Gradio version 5.0 and later include a fix that verifies the integrity of the downloaded FRP client. Users are strongly advised to upgrade. There is no direct workaround for older versions, but administrators can implement manual checksum or signature verification in their deployment scripts as a temporary measure [4].