EXPOSURE Gradio
SEVERITY HIGH
PROBE GET :7860/config
Is your Gradio exposed?
Your ML demo is public: free compute for strangers, uploads and all.
Scan a host you own → Fix card
Why it matters
Your ML demo is public. Anyone can use it (you pay for compute), poke at its inputs, and if the app accepts file uploads or runs shell-adjacent code, probe it for escapes. Demos have a way of quietly becoming production.
How common is it?
A published population estimate for Gradio is still collecting. See the census methodology.
Counts are population-level, from third-party indexes and my own honeypots. I never scan the internet and this page makes no claim about any specific host.
Fix it
The full walkthrough lives on the fix card, kept current in one place: