pvharmo2/gha-lab-6255f5fc33

PoC

Security-research lab reproducing CVE-2023-6572 (GHSA-gqvf-3hgp-5hxv): command injection in gradio-app/gradio's workflow_run handling of generate-changeset.yml

view exploit source poc_in_githubauthor pvharmo2published 2026-08-31catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2023-6572UShigh8.1Exploit
Command Injection in GitHub repository gradio-app/gradio prior to main.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan