CVE-2021-43831

CVE-2021-43831 is an arbitrary file read vulnerability affecting Gradio versions prior to 2.5.0, impacting users who publicly share Gradio interfaces. An attacker with a Gradio link can read any file on the host system if they know the file path, limited only by the operating system. This vulnerability is rated High severity (CVSS 7.7), with a network attack vector and low complexity, potentially leading to high confidentiality impact. While there is no evidence of active exploitation or Metasploit modules, a Nuclei template exists, and there is minimal community discussion or media coverage.