Skip to content
OpenAdvisories
High · 7.5 CVE-2024-7010 EUVD-2024-48031GHSA-9hcm-hr65-2825

Timing Attack in mudler/localai

Published Oct 29, 2024 · Updated Oct 15, 2025 · Assigned by @huntr_ai

Description

mudler/localai version 2.17.1 is vulnerable to a Timing Attack. This type of side-channel attack allows an attacker to compromise the cryptosystem by analyzing the time taken to execute cryptographic algorithms. Specifically, in the context of password handling, an attacker can determine valid login credentials based on the server's response time, potentially leading to unauthorized access.

Affected products

VendorProductAffectedFixed
mudler mudler/localai unspecified – < 2.21 2.21

References