Gradio versions before 6.16.0 contain a path traversal flaw in the FileExplorer component’s preprocess() method. The misuse of os.path.join allows an attacker to supply crafted path segments, including directory traversal sequences or absolute paths, that cause the library to discard the configured root directory. Consequently, an unauthenticated attacker can read any file on the host that the Gradio process can access, exposing sensitive data or system files. This vulnerability is classified as CWE‑22. The impact is a loss of data confidentiality and possible system compromise.

The affected product is Gradio, the open‑source machine‑learning interface library. Any deployment of Gradio earlier than version 6.16.0 that uses the FileExplorer component is vulnerable. Specific affected releases are all releases less than 6.16.0, as the fix was released in the 6.16.0 tag.

The flaw can be triggered without authentication by sending a specially crafted request to the FileExplorer endpoint. Because no credential requirement is mentioned, the attack vector is remote. The CVSS score of 8.7 indicates a high severity, while the EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. Exploitation would allow reading arbitrary files, which could lead to disclosure of credentials or other sensitive information. The risk is therefore high for any exposed Gradio service using the vulnerable component.