Vulnerability details
CVE-2026-49119
gradio-app gradio
Gradio < 6.16.0 Path Traversal via FileExplorer.preprocess()
CVSS 4.0
8.7High
Official description
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 8.7High | 4.0 | CVEProject cvelistV5 (CNA) (VulnCheck) | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
| 7.5High | 3.1 | CVEProject cvelistV5 (CNA) (VulnCheck) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| gradio-app | gradio | v < 6.16.0 | CVEProject cvelistV5 (CNA) |
References and advisories
4- https://github.com/gradio-app/gradio/releases/tag/gradio%406.16.0 release-notes
- https://github.com/gradio-app/gradio/pull/13437 issue-trackingpatch
- https://github.com/gradio-app/gradio/commit/97d541f3d5fd05b2587a69ecc94b68fe5d2d7004 patch
- https://www.vulncheck.com/advisories/gradio-path-traversal-via-fileexplorer-preprocess third-party-advisory
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-07-01
- Last updated
- 2026-11-08
- State
- Published
- Assigner (CNA)
- VulnCheck
Exploit prediction (EPSS)
0.69%
Probability of exploitation in 30 days
52.9%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- Yes
- Exploitation
- None
- Technical impact
- Partial
Weaknesses (CWE)
- CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')