CVE-2026-59806

High

Description

Gradio before 6.20.0 contains an open redirect and server-side request forgery vulnerability that allows attackers to redirect users to arbitrary URLs or perform client-side SSRF by supplying unvalidated HTTP/HTTPS URLs to the file_fetch() function in the /gradio_api/file= endpoint. Attackers can craft a malicious FileData response targeting internal endpoints such as cloud metadata services to retrieve sensitive credentials including EC2 IAM role credentials.

SeverityHigh

CVSS7.4

Exploit probability—

ProductGradio

PublishedJul 8, 2026

First seenJul 8, 2026

Weakness typeCWE-601Open redirect CWE-918Server-side request forgery (SSRF)

How to fix

Update

gradio-app gradio6.20.0 or later

Patches

github.com/gradio-app/gradio/commit/1c5c53842df9c2750552d85c19a92e7e732cff3f

Vendor advisories

github.com/gradio-app/gradio/releases/tag/gradio%406.20.0

Affected products

Product	Affected versions	Fixed in
gradio-app gradio	v < 6.20.0	6.20.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.