-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| gradio | pip | < 5.0.0 | 5.0.0 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from insecure FRP client-server communication when using share=True. Key functions would be those responsible for: 1) Initializing the FRP connection (likely in networking.py) without HTTPS enforcement 2) Configuring public sharing parameters (likely in utils.py). The high confidence for start_http_server aligns with its direct role in server initialization, while create_public_link gets medium confidence as configuration handler. Both would need to lack SSL/TLS enforcement to create the described vulnerability.