A local file include could be remotely triggered in Gradio due to a vulnerable user-supplied JSON value in an API request.