All vulnerabilities
CVE-2026-49119GHSA-j36p-7w88-g82jPYSEC-2026-2179

Gradio FileExplorer preprocess path traversal allows files outside root_dir to reach callbacks

gradio-app gradiopipLibraries & packages
Open in ThreatlineRecord JSON
CVSS
8.7High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.69%Chance of exploitation activity in the next 30 days, higher than 52% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in6.16.0Fixed versionGitHub
Published1 Jul 2026Updated 2 Oct 2026CVE List

What fixes it

  • 6.16.0gradio, pipGitHub
  • 6.16.0gradioCVE List
  • 6.16.0gradio, PyPIOSVpip install "gradio>=6.16.0"

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory.

Text from CVE List

Affected versions 53

  • gradio, pip< 6.16.0GitHub
  • gradioaffected: all versions before 6.16.0CVE List
  • gradio, PyPIfrom first release, fixed in 6.16.0OSV
  • gradio, PyPI0.1.0OSV
  • gradio, PyPI0.1.1OSV
  • gradio, PyPI0.1.2OSV
  • gradio, PyPI0.1.3OSV
  • gradio, PyPI0.1.4OSV
  • gradio, PyPI0.1.5OSV
  • gradio, PyPI0.1.6OSV
  • gradio, PyPI0.1.7OSV
  • gradio, PyPI0.1.8OSV
  • gradio, PyPI0.1.9OSV
  • gradio, PyPI0.2.0OSV
  • gradio, PyPI0.2.1OSV
  • gradio, PyPI0.3.0OSV
  • gradio, PyPI0.3.1OSV
  • gradio, PyPI0.3.2OSV
  • gradio, PyPI0.3.3OSV
  • gradio, PyPI0.3.4OSV
  • gradio, PyPI0.3.5OSV
  • gradio, PyPI0.4.0OSV
  • gradio, PyPI0.4.1OSV
  • gradio, PyPI0.4.2OSV
  • gradio, PyPI0.4.4OSV
  • gradio, PyPI0.5.0OSV
  • gradio, PyPI0.7.0OSV
  • gradio, PyPI0.7.1OSV
  • gradio, PyPI0.7.2OSV
  • gradio, PyPI0.7.3OSV
  • gradio, PyPI0.7.4OSV
  • gradio, PyPI0.7.5OSV
  • gradio, PyPI0.7.6OSV
  • gradio, PyPI0.7.7OSV
  • gradio, PyPI0.7.8OSV
  • gradio, PyPI0.8.0OSV
  • gradio, PyPI0.8.1OSV
  • gradio, PyPI0.9.0OSV
  • gradio, PyPI0.9.1OSV
  • gradio, PyPI0.9.2OSV
  • gradio, PyPI0.9.3OSV
  • gradio, PyPI0.9.4OSV
  • gradio, PyPI0.9.5OSV
  • gradio, PyPI0.9.6OSV
  • gradio, PyPI0.9.7OSV
  • gradio, PyPI0.9.8OSV
  • gradio, PyPI0.9.9.2OSV
  • gradio, PyPI0.9.9.3OSV
  • gradio, PyPI0.9.9.5OSV
  • gradio, PyPI0.9.9.6OSV
  • gradio, PyPI0.9.9.7OSV
  • gradio, PyPI0.9.9.8OSV
  • gradio, PyPI0.9.9.9OSV

References 7