MEDIUM5.3

PYSEC-2026-1418

Gradio Path Traversal vulnerability

Details

A vulnerability in the gradio-app/gradio repository, version git 67e4044, allows for path traversal on Windows OS. The implementation of the blocked_path functionality, which is intended to disallow users from reading certain files, is flawed. Specifically, while the application correctly blocks access to paths like 'C:/tmp/secret.txt', it fails to block access when using NTFS Alternate Data Streams (ADS) syntax, such as 'C:/tmp/secret.txt::$DATA'. This flaw can lead to unauthorized reading of blocked file paths.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/gradio

Introduced in: 0

No fixed version published yet for gradio (pip). Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2024-12217[ADVISORY]
https://github.com/gradio-app/gradio[PACKAGE]
https://github.com/gradio-app/gradio/blob/67e4044c9ca8358eceeb1fa72fa415df03397d20/gradio/utils.py#L1061-L1074[WEB]
https://huntr.com/bounties/0439bf3d-cb38-43a5-8314-0fadf85cc5a0[WEB]
https://pypi.org/project/gradio[PACKAGE]
https://github.com/advisories/GHSA-prpg-p95c-32fv[ADVISORY]