Alta

Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+

Publicada: 27.02.2026
Actualizado: 11.10.2026 12:19

Summary

Gradio apps running on Window with Python 3.13+ are vulnerable to an absolute path traversal issue that enables unauthenticated attackers to read arbitrary files from the file system.

Details

Python 3.13+ changed the definition of os.path.isabs so that root-relative paths like /windows/win.ini on Windows are no longer considered absolute paths, resulting in a vulnerability in Gradio's logic for joining paths safely.

This can be exploited by unauthenticated attackers to read arbitrary files from the Gradio server, even when Gradio is set up with authentication.

PoC

% curl http://10.10.10.10:7860/static//windows/win.ini
; for 16-bit app support
[fonts]
[extensions]
[mci extensions]
[files]
[Mail]
MAPI=1

Impact

Arbitrary file read in the context of the Windows user running Gradio.

Software afectado

Haz clic en una tecnología para ver todas sus vulnerabilidades.

Plataforma	Paquete	Versiones vulnerables	Corregida en
Python (PyPI)	gradio	< 6.7.0	6.7.0

Referencias

Puntuación CVSS 7.5/10

Vector CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Debilidad (CWE): CWE-22, CWE-36
Plataforma: Python (PyPI)
Paquete: gradio
Publicada: 27.02.2026
Actualizado: 11.10.2026 12:19

Fuentes y licencias

OSV / GitHub Advisory Database - PYSEC-2026-64 - PyPA Advisory Database; CC BY 4.0

OSV / GitHub Advisory Database - GHSA-39mp-8hj3-5c49 - CC BY 4.0

Historial de vulnerabilidades: gradio

Todas las vulnerabilidades publicadas de este paquete (Python (PyPI)), de la más reciente a la más antigua. Muestra si es un fallo aislado o un paquete que hay que vigilar.

Todas (51) en el archivo

Entradas en total: 51
Primera → última: 12.2021 07.2026
Sin corrección: 13
Explotada en ataques: 0

Distribución por gravedad

Crítica 5
Alta 19
Media 22
Baja 5

Divulgaciones por año

2021: 1
2022: 1
2023: 5
2024: 28
2025: 9
2026: 7

01.07.2026

Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplyi

Alta CVE-2026-49119 < 6.16.0 6.16.0
27.02.2026

Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing

Alta · 8.2 CVE-2026-28416 < 6.6.0 6.6.0
27.02.2026

Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+ esta entrada

Alta · 7.5 CVE-2026-28414 < 6.7.0 6.7.0
20.03.2025

Gradio DOS in multipart boundry while uploading the file

Alta · 7.5 CVE-2024-8966 <= 5.22.0 sin corrección
20.03.2025

Gradio Vulnerable to Denial of Service (DoS) via Crafted HTTP Request

Alta · 7.5 CVE-2024-10624 >= 4.38.0, <= 5.0.0-beta.2 sin corrección
20.03.2025

Gradio Vulnerable to Arbitrary File Deletion

Alta · 8.2 CVE-2024-10648 >= 4.0.0, <= 5.0.0b2 sin corrección
20.03.2025

Gradio Vulnerable to Denial of Service (DoS) via Crafted Zip Bomb

Alta · 7.5 CVE-2024-10569 >= 4.0.0, <= 5.0.0b2 sin corrección
14.01.2025

Gradio Blocked Path ACL Bypass Vulnerability

Crítica CVE-2025-23042 < 5.11.0 5.11.0
10.10.2024

Gradio uses insecure communication between the FRP client and server

Alta · 8.1 CVE-2024-47871 < 5.0.0 5.0.0
10.10.2024

Gradio has a race condition in update_root_in_config may redirect user traffic

Alta · 7.0 CVE-2024-47870 < 5.0.0 5.0.0
10.10.2024

Gradio lacks integrity checking on the downloaded FRP client

Alta · 7.5 CVE-2024-47867 < 5.0.0 5.0.0
10.10.2024

Gradios's CORS origin validation is not performed when the request has a cookie

Alta · 8.8 CVE-2024-47084 < 4.44.0 4.44.0
25.09.2024

Gradio allows users to access arbitrary files

Alta · 8.1 CVE-2024-1728 < 4.19.2 4.19.2
06.06.2024

Server-Side Request Forgery in gradio

Alta · 8.6 CVE-2024-4325 <= 4.36.0 sin corrección
06.06.2024

A local file inclusion vulnerability exists in the JSON component of gradio-app/gradio version 4.25. The vulnerability arises from improper input validation in the `postprocess()` function within `gra

Alta · 7.5 CVE-2024-4941 < 4.31.4 4.31.4
04.06.2024

A command injection vulnerability exists in the gradio-app/gradio repository, specifically within the 'test-functional.yml' workflow. The vulnerability arises due to improper neutralization of special

Crítica · 9.1 CVE-2024-4253 < 4.29.0 4.29.0
05.05.2024

Gradio before 4.20 allows credential leakage on Windows.

Alta · 7.5 CVE-2024-34510 < 4.20.0 4.20.0
16.04.2024

gradio vulnerable to Path Traversal

Alta · 7.5 CVE-2024-1561 < 4.13.0 4.13.0
27.03.2024

gradio Server-Side Request Forgery vulnerability

Alta · 7.3 CVE-2024-2206 < 4.18.0 4.18.0
05.02.2024

A local file include could be remotely triggered in Gradio due to a vulnerable user-supplied JSON value in an API request.

Crítica · 9.4 CVE-2024-0964 la fuente no lo indica sin corrección
21.12.2023

Gradio makes the `/file` secure against file traversal and server-side request forgery attacks

Alta · 8.6 CVE-2023-51449 < 4.11.0 4.11.0
14.12.2023

Gradio Exposure of Sensitive Information to an Unauthorized Actor vulnerability

Crítica · 9.6 CVE-2023-6572 < 4.14.0 4.14.0
17.03.2022

`gradio` is an open source framework for building interactive machine learning models and demos. Prior to version 2.8.11, `gradio` suffers from Improper Neutralization of Formula Elements in a CSV Fil

Alta · 8.8 CVE-2022-24770 < 2.8.11 2.8.11
15.12.2021

Files on the host computer can be accessed from the Gradio interface

Crítica · 8.3 CVE-2021-43831 < 2.5.0 2.5.0

Identifica las vulnerabilidades de tu aplicación

Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.

Conectar tu aplicación