CVE-2026-27167

Name of the Vulnerable Software and Affected Versions Gradio versions 4.16.0 through 6.5.9

Description Gradio is a Python package for rapid prototyping. Applications running outside of Hugging Face Spaces, versions 4.16.0 through 6.5.9, improperly handle OAuth components like gr.LoginButton. Visiting the /login/huggingface API endpoint triggers a process where the server retrieves and stores its Hugging Face access token in a session cookie. This cookie, signed with a hardcoded secret ("-v4"), can be decoded by remote attackers, potentially leading to credential theft. The vulnerable process occurs when an application is accessible over a network.

Recommendations Update to Gradio version 6.6.0 or later.