Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory.
Fix
Patch, vendor advisory and mitigation references on NVD 3
- https://github.com/gradio-app/gradio/commit/97d541f3d5fd05b2587a69ecc94b68fe5d2d7004 Patch
- https://github.com/gradio-app/gradio/pull/13437 Issue Tracking, Patch
- https://www.vulncheck.com/advisories/gradio-path-traversal-via-fileexplorer-preprocess Patch, Release Notes, Third Party Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 8.7 · gradio_projectNVD modified 2026-10-25 16:10
Affected (CPE criteria) 1
cpe:2.3:a:gradio_project:gradio:*:*:*:*:*:python:*:*
References 4
- https://github.com/gradio-app/gradio/commit/97d541f3d5fd05b2587a69ecc94b68fe5d2d7004 Patch
- https://github.com/gradio-app/gradio/pull/13437 Issue Tracking, Patch
- https://github.com/gradio-app/gradio/releases/tag/gradio%406.16.0 Product, Release Notes
- https://www.vulncheck.com/advisories/gradio-path-traversal-via-fileexplorer-preprocess Patch, Release Notes, Third Party Advisory