ADVISORY UNAUTH-2026-0015
TYPE exposure-class
PRODUCT Gradio
SEVERITY HIGH

HIGH

Gradio app exposed to the internet

published 2026-08-05 · updated 2026-08-05

Why it matters

Your ML demo is public. Anyone can use it (you pay for compute), poke at its inputs, and if the app accepts file uploads or runs shell-adjacent code, probe it for escapes. Demos have a way of quietly becoming production.

What a probe sees

GET :7860/config answers a Gradio app config without auth.

Internet-facing exposure — observable from the public internet with GET-only probes (the same probes unauth.dev sends).

no-auth-by-design

In the wild

HONEYPOT EVIDENCE · only unauth.dev publishes this
SERVICE gradio
PROBES (30d) 3
FIRST SEEN 2026-08-02
LAST SEEN 2026-08-04

Day-granularity probe counts from the unauth.dev botwatch honeypot (3 observed across retained history), refreshed monthly. No source IPs exist in the underlying data. Live view: /botwatch.

Fix it

Fix card: gradio-exposed →

References

https://www.gradio.app/guides/sharing-your-app

Cite this record

unauth.dev advisory UNAUTH-2026-0015 — observed 2026-08 · CC-BY 4.0

Canonical URL: https://unauth.dev/advisories/UNAUTH-2026-0015. This record is part of the unauth.dev advisory dataset, published under CC-BY 4.0: attribute "unauth.dev / Raúl Acedo". Schema: additive-only within v1; this id will never be renumbered or reused.