CVE-2026-10783

LOW

gradio-app gradio Audio Cache Key save_audio_to_cache weak hash

Title source: cna
STIX 2.1

Description

A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch.

References (7)

Core 7
Core References
Vdb Entry, Technical Description vdb-entry technical-description
VDB-368140 | gradio-app gradio Audio Cache Key save_audio_to_cache weak hash
https://vuldb.com/vuln/368140
Signature, Permissions Required signature permissions-required
VDB-368140 | CTI Indicators (IOB, IOC, TTP, IOA)
https://vuldb.com/vuln/368140/cti
Third Party Advisory third-party-advisory
CVE-2026-10783 | CVE Analysis and Report
https://vuldb.com/cve/CVE-2026-10783
Third Party Advisory third-party-advisory
Submit #831451 | gradio-app gradio 6.14.0 Cache Poisoning
https://vuldb.com/submit/831451
Exploit exploit issue-tracking
https://github.com/gradio-app/gradio/issues/13395

Scores

CVSS v3 2.5
EPSS 0.0009
EPSS Percentile 0.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-327 CWE-328
Status published
Products (2)
gradio-app/gradio 6.14.0
gradio_project/gradio 6.14.0
Published Jun 04, 2026
Tracked Since Jun 04, 2026