Low severity2.5NVD Advisory· Published Jun 4, 2026· Updated Jul 22, 2026
CVE-2026-10783
CVE-2026-10783
Description
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
gradioPyPI | < 6.15.1 | 6.15.1 |
Affected products
3(expand)+ 1 more
- (no CPE)
- (no CPE)range: =6.14.0
- cpe:2.3:a:gradio_project:gradio:6.14.0:*:*:*:*:python:*:*
Patches
Vulnerability mechanics
References
10- github.com/gradio-app/gradio/pull/13394nvdIssue TrackingPatchWEB
- github.com/gradio-app/gradio/issues/13395nvdExploitIssue TrackingWEB
- github.com/advisories/GHSA-6655-8ph2-63j3ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2026-10783ghsaADVISORY
- vuldb.com/cve/CVE-2026-10783nvdThird Party AdvisoryVDB EntryWEB
- vuldb.com/submit/831451nvdThird Party AdvisoryVDB EntryWEB
- vuldb.com/vuln/368140nvdThird Party AdvisoryVDB EntryWEB
- github.com/gradio-app/gradio/commit/1c609af6918b20d0b4347b9f41b04569d6adca24ghsaWEB
- github.com/pypa/advisory-database/tree/main/vulns/gradio/PYSEC-2026-211.yamlghsaWEB
- vuldb.com/vuln/368140/ctinvdPermissions RequiredVDB EntryWEB
News mentions
0No linked articles in our index yet.