CVE-2024-1728: Gradio UploadButton path traversal allows arbitrary file read

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 18 September 2026. Confidence: high.

high priorityUnauthenticated network-reachable arbitrary file read with a very high EPSS score and public exploit reference, though not yet in KEV.

What it is

Gradio's UploadButton component fails to properly validate user-supplied file paths, allowing path traversal through the /queue/join endpoint. An unauthenticated attacker can read arbitrary files on the server filesystem, including private SSH keys, and the flaw may escalate to remote code execution. The issue is patched upstream.

Impact

An attacker gains read access to any file the Gradio process can reach, exposing credentials and keys, with a stated potential path to remote code execution. This can lead to full server compromise depending on what is readable and writable.

Attack surface

Reached over the network via the /queue/join endpoint with no authentication and no user interaction required, per the CVSS vector AV:N/AC:L/PR:N/UI:N. Any internet- or network-exposed Gradio instance with the affected UploadButton handling is in scope.

Exploitation

Not listed in CISA KEV, but EPSS is very high at 0.854 (99.7th percentile) and a public exploit reference exists via the huntr bounty, indicating active interest and likely weaponization.

What to do

• Apply the upstream patch commit 16fbe9cd0cffa9f2a824a0165beb43446114eec7 or upgrade to a fixed Gradio release.
• Restrict network access to Gradio endpoints such as /queue/join to trusted clients; do not expose Gradio apps directly to the internet.
• Run the Gradio service under a least-privilege account with no access to sensitive files like SSH keys or cloud credentials.
• Validate and canonicalize all user-supplied upload paths server-side, rejecting traversal sequences and paths outside the intended upload directory.

Detection

• Monitor requests to /queue/join for path traversal patterns such as ../ or encoded variants in file path parameters.
• Alert on the Gradio process reading files outside its expected upload or application directories, especially SSH keys or credential stores.
• Review web logs for anomalous file path values in upload-related requests from single or untrusted source IPs.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.