CVE-2026-49119

High

Description

Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory.

SeverityHigh

CVSS7.5

Exploit probability—

ProductGradio

PublishedJul 1, 2026

First seenJul 1, 2026

Weakness typeCWE-22Path traversal

How to fix

Update

gradio_project gradio6.16.0 or later
gradio6.16.0 or later

Patches

github.com/gradio-app/gradio/commit/97d541f3d5fd05b2587a69ecc94b68fe5d2d7004

Vendor advisories

github.com/gradio-app/gradio/releases/tag/gradio%406.16.0

Affected products

Product	Affected versions	Fixed in
gradio_project gradio	v < 6.16.0	6.16.0
gradioPyPI	v < 6.16.0	6.16.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.