CVE-2026-49119 json
Gradio < 6.16.0 Path Traversal via FileExplorer.preprocess()
published 4mo ago modified 3d ago also EUVD-2026-41115 , GHSA-j36p-7w88-g82j , PYSEC-2026-2179
- cvss
- 7.5
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.7%
- EPSS 0.7% chance of exploitation in 30 days, percentile 53%
- public exploits
- 0
- none known
Summary
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory.
Patch / fix
- pypi gradio 6.16.0
- gradio-app gradio 6.16.0
Is CVE-2026-49119 in your dependencies? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.
Check with FencerCISA SSVC
- Exploitation
- none
- Automatable
- yes
- Technical impact
- partial
- Assessed
- 4mo ago
Exploit prediction
0.69% chance of exploitation in the next 30 days, higher than 53% of all scored CVEs (FIRST EPSS, 2026-11-11).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 4.0 | 8.7 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
| CNA | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| GitHub | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| CNA | 4.0 | 8.7 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | gradio | <6.16.0 |
6.16.0 |
Affected products
- gradio-app gradio
Classification
- Weakness
-
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory
References
-
github.com
/gradio-app/gradio/pull/13437
issue-tracking, patch, web
-
github.com
/gradio-app/gradio/commit/97d541f3d5fd05b2587a69ecc94b68fe5d2d7004
patch, web
-
vulncheck.com
/advisories/gradio-path-traversal-via-fileexplorer-preprocess
third-party-advisory, web, patch, release-notes
-
github.com
/gradio-app/gradio/releases/tag/gradio%406.16.0
release-notes, web, product, advisory
-
nvd.nist.gov
/vuln/detail/CVE-2026-49119
advisory
-
github.com
/gradio-app/gradio
package
-
github.com
/pypa/advisory-database/tree/main/vulns/gradio/PYSEC-2026-2179.yaml
web
-
github.com
/advisories/GHSA-j36p-7w88-g82j
advisory
Sources
- CVE List CVE-2026-49119
- GitHub Advisory GHSA-j36p-7w88-g82j
- NVD CVE-2026-49119
- OSV PYSEC-2026-2179
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.