CVE-2026-49119

Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/gradio-app/gradio/commit/97d541f3d5fd05b2587a69ecc94b68fe5d2d7004	Patch
https://github.com/gradio-app/gradio/pull/13437	Issue Tracking Patch
https://github.com/gradio-app/gradio/releases/tag/gradio%406.16.0	Product Release Notes
https://www.vulncheck.com/advisories/gradio-path-traversal-via-fileexplorer-preprocess	Patch Release Notes Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:gradio_project:gradio:*:*:*:*:*:python:*:*

History

25 Oct 2026, 16:10

Type	Values Removed	Values Added
Summary		(es) Gradio anterior a la versión 6.16.0 contiene una vulnerabilidad de salto de ruta en el método preprocess() del componente FileExplorer que permite a atacantes no autenticados escapar del directorio raíz configurado al proporcionar segmentos de ruta que contienen secuencias de salto de directorio o rutas absolutas. Los atacantes pueden proporcionar segmentos de ruta manipulados que hacen que os.path.join descarte completamente el prefijo root_dir, lo que resulta en lectura arbitraria de archivos o la exposición de archivos sensibles fuera del directorio previsto.

Information

Published : 2026-07-01 19:16

Updated : 2026-10-25 16:10

NVD link : CVE-2026-49119

Mitre link : CVE-2026-49119

CVE.ORG link : CVE-2026-49119

JSON object : View

Products Affected

gradio_project

gradio

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2026-49119", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-49119", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-02T14:37:02.484665Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.7, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "disclosure@vulncheck.com", "affectedData": [{"repo": "https://github.com/gradio-app/gradio", "vendor": "gradio-app", "product": "gradio", "versions": [{"status": "affected", "version": "0", "lessThan": "6.16.0", "versionType": "semver"}], "packageURL": "pkg:github/gradio-app/gradio", "defaultStatus": "affected"}]}], "published": "2026-07-01T19:16:52.463", "references": [{"url": "https://github.com/gradio-app/gradio/commit/97d541f3d5fd05b2587a69ecc94b68fe5d2d7004", "tags": ["Patch"], "source": "disclosure@vulncheck.com"}, {"url": "https://github.com/gradio-app/gradio/pull/13437", "tags": ["Issue Tracking", "Patch"], "source": "disclosure@vulncheck.com"}, {"url": "https://github.com/gradio-app/gradio/releases/tag/gradio%406.16.0", "tags": ["Product", "Release Notes"], "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/gradio-path-traversal-via-fileexplorer-preprocess", "tags": ["Patch", "Release Notes", "Third Party Advisory"], "source": "disclosure@vulncheck.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory."}, {"lang": "es", "value": "Gradio anterior a la versi\u00f3n 6.16.0 contiene una vulnerabilidad de salto de ruta en el m\u00e9todo preprocess() del componente FileExplorer que permite a atacantes no autenticados escapar del directorio ra\u00edz configurado al proporcionar segmentos de ruta que contienen secuencias de salto de directorio o rutas absolutas. Los atacantes pueden proporcionar segmentos de ruta manipulados que hacen que os.path.join descarte completamente el prefijo root_dir, lo que resulta en lectura arbitraria de archivos o la exposici\u00f3n de archivos sensibles fuera del directorio previsto."}], "lastModified": "2026-10-25T16:10:00.147", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:gradio_project:gradio:*:*:*:*:*:python:*:*", "vulnerable": true, "matchCriteriaId": "99CB328E-75BB-4AFF-87D1-9D567CE47FC3", "versionEndExcluding": "6.16.0"}], "operator": "OR"}]}], "sourceIdentifier": "disclosure@vulncheck.com"}