CVE-2025-0187
Published: 20 March 2025
Summary
CVE-2025-0187 is a high-severity Uncontrolled Resource Consumption (CWE-400) vulnerability in Gradio Project Gradio. Its CVSS base score is 7.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Application or System Exploitation (T1499.004); ranked in the top 26.4% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
This vulnerability is AI-related — categorised as Machine Learning Libraries; in the Supply Chain and Deployment risk domain.
Deeper analysis
A Denial of Service vulnerability exists in the file upload feature of gradio-app/gradio version 0.39.1. The root cause is improper handling of multipart form-data containing an excessively large filename value, which triggers uncontrolled resource consumption (CWE-400) and renders the server unresponsive. The issue carries a CVSS 3.0 score of 7.5 with network attack vector, no required authentication or user interaction, and high impact on availability.
An unauthenticated remote attacker can exploit the flaw by submitting a single crafted file-upload request with an oversized filename. Successful exploitation exhausts server resources, making the Gradio application unavailable to legitimate users without requiring any special privileges or prior access.
The EPSS score rose from a low baseline to a recorded peak of 0.0145, indicating emerging exploitation interest after disclosure. Gradio is widely used to build interfaces for machine-learning models, so the vulnerability affects deployments in AI/ML research and production environments.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-6820
Vulnerability details
A Denial of Service (DoS) vulnerability was discovered in the file upload feature of gradio-app/gradio version 0.39.1. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. By sending a payload with…
more
an excessively large filename, the server becomes overwhelmed and unresponsive, leading to unavailability for legitimate users.
- CWE(s)
AI Security AnalysisAI
- AI Category
- Machine Learning Libraries
- Risk Domain
- Supply Chain and Deployment
- OWASP Top 10 for LLMs 2025
- None mapped
- Classification Reason
- Matched keywords: gradio
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
The vulnerability enables denial of service by exploiting the file upload feature with an excessively large filename, overwhelming the server and causing it to become unresponsive.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Limiting concurrent sessions directly prevents uncontrolled resource consumption by capping the number of active sessions per user or account.
Analysis identifies uncontrolled resource consumption indicative of denial-of-service or abuse attempts.
Contingency plan testing includes resource exhaustion scenarios to verify recovery, making it harder for attackers to sustain exploits that cause uncontrolled consumption.
Updated contingency plans include current procedures to detect, contain, and recover from resource exhaustion, limiting an attacker's ability to sustain impact from uncontrolled consumption.
Alternate site allows resumption of operations if resource exhaustion at the primary site is exploited to cause unavailability.
Alternate telecommunications services enable resumption of essential functions when primary services become unavailable due to uncontrolled resource consumption.
The team can analyze and respond to resource exhaustion incidents, reducing the impact of attacks that exploit uncontrolled consumption weaknesses.
Timely maintenance support and spare parts enable rapid recovery from failures induced by uncontrolled resource consumption, shortening the impact window of denial-of-service attacks.