CVE-2026-28416

[CVE catalog]

Severity

High · CVSS 8.2CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Published

Feb 27, 2026, 9:47:04 PM UTC

Source

[NVD] · [CVE record]

EPSS

7.26% · Oct 25, 2026

A flaw was found in Gradio, an open-source Python package for rapid prototyping. A remote attacker can exploit a Server-Side Request Forgery (SSRF) vulnerability by hosting a malicious Gradio Space. When a victim application uses `gr.load()` to load this attacker-controlled Space, a malicious `proxy_url` from the configuration is trusted. This allows the attacker to make arbitrary HTTP requests from the victim's server, potentially accessing internal services, cloud metadata endpoints, and private networks through the victim's infrastructure. This is an IMPORTANT Server-Side Request Forgery (SSRF) vulnerability in Gradio, affecting the `ansible-chatbot-service` within Red Hat Ansible Services. The flaw allows an attacker to make arbitrary HTTP requests from a victim's server by injecting a malicious `proxy_url` when the application uses `gr.load()` to load an attacker-controlled Gradio Space. This could lead to unauthorized access to internal services, cloud metadata, and private networks. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.