Gradio v3.27.0 was discovered to contain an arbitrary file upload vulnerability via the /upload interface.