Gradio EUVD-2026-34187

Exploitation requires local access to the system running Gradio (AV:L) with at least low-privilege credentials (PR:L per CVSS vector). High attack complexity (AC:H) means the attacker must precisely craft two audio arrays that share identical raw byte content while differing in at least one metadata attribute (sample rate, format, dtype, or shape) to produce a meaningful cache collision. Gradio's audio caching functionality must be active, which is the default behavior when the Audio component is used. Remote network exploitation is not possible. The limiting factors - mandatory local access, high complexity, and confidentiality-only impact limited to cached audio data - significantly constrain the realistic attacker population to co-located or shared-host scenarios involving mutually untrusted users.

Real-world risk is very low and the CVSS 4.0 score of 1.1 is consistent with the actual threat profile. The attack vector is strictly local (AV:L), requires low privileges (PR:L), and carries high attack complexity (AC:H), meaning the attacker must already have a foothold on the host and be able to craft precise audio inputs that produce a byte-level collision. The sole impact is limited confidentiality disclosure at the victim component level (VC:L) with no integrity or availability consequences. No EPSS data was provided in the source intelligence. The E:P exploit modifier confirms public proof-of-concept code exists, but no CISA KEV listing indicates no confirmed in-the-wild active exploitation. This vulnerability is a genuine finding with a narrow, well-defined blast radius - not a candidate for emergency prioritization unless Gradio instances are shared among mutually untrusted local users who handle sensitive audio data.

A local user with low privileges submits two audio inputs to a Gradio application: one with dtype int16 at 8000 Hz and another with dtype uint16 at 8000 Hz, both containing identical raw byte sequences. Under the vulnerable hash scheme, both map to the same cache directory path, causing the second write to overwrite or collide with the first. A subsequent request for the first audio file retrieves the second user's cached audio instead, constituting information disclosure. A public proof-of-concept exists per the CVSS E:P modifier and the CVE description statement that 'the exploit has been released to the public.'