All vulnerabilities
CVE-2026-59707GHSA-8c5q-hx4g-qq23GO-2026-6645

github.com/mudler/LocalAI: LocalAI POST /models/apply permits unauthenticated server-side request forgery through gallery URLs

LocalAI github.com/mudler/LocalAIgoLibraries & packages
Open in ThreatlineRecord JSON
CVSS
9.2Critical
ExploitationPublic exploit codeCISA's assessment says proof of concept code is public, assessed 8 Jul 2026. Not in the KEV catalogCISA via CVE List
Exploit odds (EPSS)0.48%Chance of exploitation activity in the next 30 days, higher than 40% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in1.40.1-0.20260703213242-2cbb3c96b34dFixed versionGitHub
Published7 Jul 2026Updated 7 Oct 2026CVE List

What fixes it

  • 1.40.1-0.20260703213242-2cbb3c96b34dgithub.com/mudler/LocalAI, goGitHubgo get github.com/mudler/LocalAI@v1.40.1-0.20260703213242-2cbb3c96b34d
  • 1.40.1-0.20260703213242-2cbb3c96b34dgithub.com/mudler/LocalAI, GoOSVgo get github.com/mudler/LocalAI@v1.40.1-0.20260703213242-2cbb3c96b34d

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint that allows attackers to fetch arbitrary internal URLs. The endpoint passes unsanitized gallery URL fields directly to gallery.GetGalleryConfigFromURLWithContext without proper validation, enabling attackers to force the server to issue HTTP GET requests to private and loopback ranges with partial response content leaked through error messages.

Text from CVE List

Affected versions 3

  • github.com/mudler/LocalAI, go< 1.40.1-0.20260703213242-2cbb3c96b34dGitHub
  • LocalAIaffected: all versions through v4.3.1CVE List
  • github.com/mudler/LocalAI, Gofrom first release, fixed in 1.40.1-0.20260703213242-2cbb3c96b34dOSV

References 6