Gradio: Gradio FileExplorer preprocess path traversal allows files outside root_dir to reach callbacks
Gradio
More for Gradio RSS feed for Gradio
- Severity
- High, CVSS 7.5
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Record
- CVE-2026-49119
- Affects
- Gradio
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- July 1, 2026
- Source last modified
- October 25, 2026
Description
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory.
Description quoted from the NVD record.
Who is affected
Gradio is a tool for building simple web apps that let people use machine learning (AI) models through a web page. This flaw affects versions of Gradio before 6.16.0, in the file browser building block that lets app users pick files from a set folder on the server. An attacker who has not logged in could send specially made file locations that step outside that folder. This would let them read files elsewhere on the server, including sensitive ones the app was never meant to share. This flaw is rated High.
What to do
- If someone in your organization installed or runs a Gradio app, ask that person to check which version of Gradio it uses.
- If the version is older than
6.16.0, have them update Gradio to6.16.0or later. - If an IT provider or vendor runs the Gradio app for your organization, send them this advisory and ask when the update will be done.
- If you are not sure whether any of your apps use Gradio, ask whoever built or hosts them to check.
Analysis written from the source record as of October 25, 2026 and reviewed before publishing.