CVE-2026-49119 is a path traversal vulnerability in gradio-app's gradio product affecting versions before 6.16.0. The issue exists in the FileExplorer component's preprocess() method, where improper handling of path segments allows attackers to escape the intended root directory. By supplying crafted path segments containing directory traversal sequences or absolute paths, attackers can manipulate os.path.join to discard the root_dir prefix entirely. This leads to unauthorized access to arbitrary files outside the restricted directory, potentially exposing sensitive information. The vulnerability is remotely exploitable without authentication or user interaction, reflected by a CVSS 4.0 score of 8.7 (high severity). No official patch or remediation guidance is currently documented.

The vulnerability allows unauthenticated remote attackers to read arbitrary files on the system running vulnerable versions of gradio by escaping the configured root directory. This can lead to exposure of sensitive files outside the intended directory, posing confidentiality risks. There is no indication of privilege escalation, integrity, or availability impact beyond unauthorized file disclosure.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to the FileExplorer component or deploying compensating controls to limit exposure. Monitor vendor channels for updates regarding an official fix or mitigation.