CVE-2026-59806 is an open redirect and SSRF vulnerability in gradio-app's gradio product affecting versions before 6.20.0. The vulnerability exists in the file_fetch() function accessed via the /gradio_api/file= endpoint, which does not properly validate supplied HTTP/HTTPS URLs. This allows attackers to redirect users to arbitrary external URLs or perform SSRF attacks by crafting malicious FileData responses. Such SSRF attacks can target internal cloud metadata services to extract sensitive credentials, including EC2 IAM role credentials. The vulnerability has a CVSS 4.9 (medium) score and is present in cloud-hosted instances of gradio. The vendor manages patching for this cloud service.

Successful exploitation can lead to user redirection to untrusted sites, potentially facilitating phishing or other social engineering attacks. More critically, the SSRF aspect allows attackers to access internal endpoints such as cloud metadata services, enabling retrieval of sensitive credentials like EC2 IAM role credentials. This can compromise cloud infrastructure security and lead to unauthorized access or privilege escalation within the cloud environment.

Since gradio is a cloud-hosted service, the vendor manages remediation server-side. Users should ensure they are using gradio version 6.20.0 or later where this vulnerability is fixed. Check the vendor advisory for confirmation of patch deployment. No additional user action is required if using the cloud service and the vendor has applied the fix.