A Gradio app on the usual port 7860, vulnerable to the path-traversal file read that let us pull /flag.txt.