Denial of Service Vulnerability in Gradio by Gradio App

CVE-2025-0187

What is CVE-2025-0187?

A Denial of Service (DoS) vulnerability has been identified in the file upload functionality of Gradio version 0.39.1. This issue stems from the improper handling of form-data containing overly large filenames within file upload requests. When an attacker submits a payload featuring an excessively large filename, it can overwhelm the server, leading to a denial of service that prevents legitimate users from accessing the application. Organizations leveraging this version of Gradio should take immediate measures to mitigate potential exploits of this vulnerability.

References