CVE-2026-49119 json
Gradio < 6.16.0 Path Traversal via FileExplorer.preprocess()
published 2026-07-01 4 mo ago modified 2026-11-08 23 h ago also EUVD-2026-41115 , GHSA-j36p-7w88-g82j , PYSEC-2026-2179
- cvss
- 7.5
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.7%
- EPSS 0.7% chance of exploitation in 30 days, percentile 53%
- public exploits
- 0
- none known
Summary
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory.
Patch / fix
- pypi gradio 6.16.0
- gradio-app gradio 6.16.0
CISA SSVC
- Exploitation
- none
- Automatable
- yes
- Technical impact
- partial
- Assessed
- 4 mo ago
Exploit prediction
0.69% chance of exploitation in the next 30 days, higher than 53% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 4.0 | 8.7 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
| CNA | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| GitHub | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| CNA | 4.0 | 8.7 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | gradio | <6.16.0 |
6.16.0 |
Affected products
- gradio-app gradio
Classification
- Weakness
-
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory
References
-
github.com
/gradio-app/gradio/pull/13437
issue-tracking, patch, web
-
github.com
/gradio-app/gradio/commit/97d541f3d5fd05b2587a69ecc94b68fe5d2d7004
patch, web
-
vulncheck.com
/advisories/gradio-path-traversal-via-fileexplorer-preprocess
third-party-advisory, web, patch, release-notes
-
github.com
/gradio-app/gradio/releases/tag/gradio%406.16.0
release-notes, web, product, advisory
-
nvd.nist.gov
/vuln/detail/CVE-2026-49119
advisory
-
github.com
/gradio-app/gradio
package
-
github.com
/pypa/advisory-database/tree/main/vulns/gradio/PYSEC-2026-2179.yaml
web
-
github.com
/advisories/GHSA-j36p-7w88-g82j
advisory
Sources
- CVE List CVE-2026-49119
- GitHub Advisory GHSA-j36p-7w88-g82j
- NVD CVE-2026-49119
- OSV PYSEC-2026-2179
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.