Skip to content
OpenAdvisories

Package · Go

github.com/mudler/LocalAI

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2026-59707

    LocalAI - Server-Side Request Forgery via POST /models/apply

    LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint that allows attackers to fetch arbitrary internal URLs. The endpoint passes unsanitized gallery URL fields directly to gallery.GetGalleryConfigFro…

    LocalAI LocalAI github.com/mudler/LocalAI Go