p PatchFirst

PatchFirst · Latest vulnerabilities

gradio 6.15.2: known vulnerabilities

The comparison for gradio 6.15.2 is incomplete. Review the confirmed matches below.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Could not compare 6 records. The results are incomplete.

Vulnerability: 1

  1. CVE-2026-49119

    High · CVSS 8.7EPSS 0.69%Fix available

    Gradio < 6.16.0 Path Traversal via FileExplorer.preprocess()

    Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory.

    gradioPython
    • Update to 6.16.0
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →