CVE-2026-59806

Name of the Vulnerable Software and Affected Versions Gradio versions prior to 6.20.0

Description An open redirect and server-side request forgery (SSRF) issue exists where attackers can redirect users to arbitrary URLs or perform client-side SSRF. This occurs when unvalidated HTTP/HTTPS URLs are supplied to the file fetch() function via the /gradio api/file= endpoint. Attackers can craft a malicious FileData response to target internal endpoints, such as cloud metadata services, to retrieve sensitive information like EC2 IAM role credentials.

Recommendations Update Gradio to version 6.20.0 or later. As a temporary workaround, restrict access to the /gradio api/file= endpoint or avoid using the file fetch() function until the update is applied.