CVE-2023-25823

CVE-2023-25823 is a critical vulnerability affecting Gradio versions prior to 3.13.1, where hard-coded credentials lead to the exposure of a private SSH key when share links are enabled. This allows any connected user to access other shared Gradio demos, potentially leading to further exploits depending on the application's access level. With a CVSS score of 9.8 (Critical), the vulnerability is easily exploitable over the network with low complexity, enabling high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation, public exploit code, or significant community discussion, immediate patching to version 3.19.1 or later is strongly recommended.