Skip to content
OpenAdvisories

Package · Go

github.com/go-skynet/LocalAI

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 7.5
    CVE-2024-5182 EPSS 26%

    Path Traversal in mudler/localai

    A path traversal vulnerability exists in mudler/localai version 2.14.0, where an attacker can exploit the `model` parameter during the model deletion process to delete arbitrary files. Specifically, by crafting a request with a manipulated `model` parameter, …

    mudler mudler/localai github.com/go-skynet/LocalAI Go
  • Critical 9.8
    CVE-2024-2029

    Command Injection in mudler/localai

    A command injection vulnerability exists in the `TranscriptEndpoint` of mudler/localai, specifically within the `audioToWav` function used for converting audio files to WAV format for transcription. The vulnerability arises due to the lack of sanitization of …

    mudler mudler/localai github.com/go-skynet/LocalAI Go
  • Medium 6.5
    CVE-2024-3135

    Cross-Site Request Forgery (CSRF) Vulnerability in mudler/localai

    A Cross-Site Request Forgery (CSRF) vulnerability exists in the mudler/localai application, allowing attackers to craft malicious webpages that, when visited by a victim, perform unauthorized actions on the victim's local LocalAI instance without their consen…

    mudler mudler/localai github.com/go-skynet/LocalAI Go