← fix library

HIGH Gradio: Gradio app exposed to the internet

Why it matters

Your ML demo is public. Anyone can use it (you pay for compute), poke at its inputs, and if the app accepts file uploads or runs shell-adjacent code, probe it for escapes. Demos have a way of quietly becoming production.

Fix it — 3 steps

1. If it was a demo, take it down or stop sharing: launch with `share=False` and bind locally (`server_name="127.0.0.1"`).
2. If it must be public, add auth: `demo.launch(auth=("user", "strong-password"))` or an authenticating reverse proxy, and set `show_error=False` in production so tracebacks do not leak internals.
3. Block the port until then: `sudo ufw deny 7860`.

Verify it’s fixed

curl -m 5 http://YOUR_SERVER_IP:7860/config  # should be unreachable or behind auth

References

• https://www.gradio.app/guides/sharing-your-app