Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+
High7.5CVE-2026-28414 · Published Mar 1, 2026 · updated Jun 6, 2026
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| gradio PyPI | < 6.7.0 | 6.7.0 |
Details and references
### Summary Gradio apps running on Window with Python 3.13+ are vulnerable to an absolute path traversal issue that enables unauthenticated attackers to read arbitrary files from the file system. ### Details Python 3.13+ changed the definition of `os.path.isabs` so that root-relative paths like `/windows/win.ini` on Windows are no longer considered absolute paths, resulting in a vulnerability in Gradio's logic for joining paths safely. This can be exploited by unauthenticated attackers to read arbitrary files from the Gradio server, even when Gradio is set up with authentication. ### PoC ``` % curl http://10.10.10.10:7860/static//windows/win.ini ; for 16-bit app support [fonts] [extensions] [mci extensions] [files] [Mail] MAPI=1 ``` ### Impact Arbitrary file read in the context of the Windows user running Gradio.
More Gradio advisories
All Gradio| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Mar 1 | Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret CVE-2026-27167Low0.0fixed in 6.6.0 | Low0.0 | 6.6.0 |
| Mar 1 | Gradio has an Open Redirect in its OAuth Flow CVE-2026-28415Medium4.3fixed in 6.6.0 | Medium4.3 | 6.6.0 |
| Mar 1 | Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing CVE-2026-28416High8.2fixed in 6.6.0 | High8.2 | 6.6.0 |
| May 27 | Gradio contains a cookie injection vulnerability CVE-2026-48545High6.8fixed in 6.15.0 | High6.8 | 6.15.0 |
| Jun 4 | Gradio: Audio cache key ignores metadata when saving numpy audio outputs CVE-2026-10783Low2.5fixed in 6.15.1 | Low2.5 | 6.15.1 |
| Jul 1 | Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide c CVE-2026-49119High7.5fixed in 6.16.0 | High7.5 | 6.16.0 |