Gradio versions prior to 6.16.0 contain a path traversal vulnerability in the FileExplorer component’s preprocess() method. An attacker can craft a file path that includes directory traversal sequences or absolute paths, causing the intended directory. This flaw permits arbitrary file reads potentially allowing further compromise. The weakness is classified as CWE‑22.

All installations of the Gradio Python library before version 6.16.0 are affected. The vulnerability impacts any software that uses the FileExplorer component within the Gradio framework, regardless of deployment environment, as the flaw operates from the user input side. The affected vendors and products are Gradio by gradio-app:gradio, covering every release less than 6.16.0.

The CVSS score of 8.7 demonstrates high severity, while the EPSS score of <1% indicates a very low probability of exploitation. The vulnerability is not listed in CISA’s KEV catalog, suggesting no documented active exploitation. The likely attack vector is remote, inferred from the description that an unauthenticated attacker can supply path segments to trigger the flaw. Because unauthenticated users can read arbitrary files, the impact is primarily a loss of confidentiality with potential to enable further system compromise if sensitive files are accessed.