Skip to content
OpenAdvisories

Vendor

mudler

10 known vulnerabilities.

Products

mudler/localai 10
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.8
    CVE-2024-6095 Public exploit

    SSRF and Partial LFI in /models/apply Endpoint in mudler/localai

    A vulnerability in the /models/apply endpoint of mudler/localai versions 2.15.0 allows for Server-Side Request Forgery (SSRF) and partial Local File Inclusion (LFI). The endpoint supports both http(s):// and file:// schemes, where the latter can lead to LFI. …

    mudler mudler/localai