Skip to content
OpenAdvisories

Vendor

mudler

10 known vulnerabilities.

Products

mudler/localai 10
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-5181

    Command Injection in mudler/localai

    A command injection vulnerability exists in the mudler/localai version 2.14.0. The vulnerability arises from the application's handling of the backend parameter in the configuration file, which is used in the name of the initialized process. An attacker can e…

    mudler mudler/localai
  • Critical 9.8
    CVE-2024-2029

    Command Injection in mudler/localai

    A command injection vulnerability exists in the `TranscriptEndpoint` of mudler/localai, specifically within the `audioToWav` function used for converting audio files to WAV format for transcription. The vulnerability arises due to the lack of sanitization of …

    mudler mudler/localai github.com/go-skynet/LocalAI Go