CVE-2026-49119: Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that all

Gradio versions before 6.16.0 contain a path traversal vulnerability (a security flaw where attackers bypass restrictions on which directories they can access) in the FileExplorer component's preprocess() method. Unauthenticated attackers can supply specially crafted file paths that cause the system to escape the intended root directory and read arbitrary files outside the configured location, potentially exposing sensitive data.