Vulnerability Description
Gradio before 6.20.0 contains an open redirect and server-side request forgery vulnerability that allows attackers to redirect users to arbitrary URLs or perform client-side SSRF by supplying unvalidated HTTP/HTTPS URLs to the file_fetch() function in the /gradio_api/file= endpoint. Attackers can craft a malicious FileData response targeting internal endpoints such as cloud metadata services to retrieve sensitive credentials including EC2 IAM role credentials.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/gradio-app/gradio/commit/1c5c53842df9c2750552d85c19a92e7e732c
- https://github.com/gradio-app/gradio/issues/13593
- https://github.com/gradio-app/gradio/pull/13596
- https://github.com/gradio-app/gradio/releases/tag/gradio%406.20.0
- https://www.vulncheck.com/advisories/gradio-open-redirect-and-ssrf-via-gradio-ap
FAQ
What is CVE-2026-59806?
CVE-2026-59806 is a vulnerability with a CVSS score of 7.4 (HIGH). Gradio before 6.20.0 contains an open redirect and server-side request forgery vulnerability that allows attackers to redirect users to arbitrary URLs or perform client-side SSRF by supplying unvalida...
How severe is CVE-2026-59806?
CVE-2026-59806 has been rated HIGH with a CVSS base score of 7.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-59806?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.