Staging Environment: Content and features may be unstable or change without notice.
Advisory details: pypa / gradio/PYSEC-2026-211
Advisory ID pypa/gradio/PYSEC-2026-211
Aliases CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Summary A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch.
Status Published
Exploitability 0.5
Weighted Severity 2.2
Risk 1.1
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (0)
There are no known CWE.
System Score Found at
cvssv3.1 2.5 https://github.com/pypa/advisory-database/blob/main/vulns/gradio/PYSEC-2026-211.yaml
Reference id Reference type URL
https://github.com/gradio-app/gradio/
13394 Bug https://github.com/gradio-app/gradio/pull/13394
13395 Bug https://github.com/gradio-app/gradio/issues/13395
368140 Advisory https://vuldb.com/vuln/368140
831451 Advisory https://vuldb.com/submit/831451
cti Other https://vuldb.com/vuln/368140/cti
CVE-2026-10783 Advisory https://vuldb.com/cve/CVE-2026-10783
GHSA-6655-8ph2-63j3 https://github.com/advisories/GHSA-6655-8ph2-63j3
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://github.com/pypa/advisory-database/blob/main/vulns/gradio/PYSEC-2026-211.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-06-04T14:19:30Z/

Decision: Track

Source URL: https://github.com/cisagov/vulnrichment/blob/develop/2026/10xxx/CVE-2026-10783.json

Source Advisory: vulnrichment/CVE-2026-10783

View SSVC decision tree 
[{'Exploitation': 'poc'},
 {'Automatable': 'no'},
 {'Technical Impact': 'partial'},
 {'Mission Prevalence': 'minimal'},
 {'Public Well-being Impact': 'material'},
 {'Mission & Well-being': 'medium'}]