Description
LocalAI v4.6.0 through v4.11.0 contains a server-side request forgery vulnerability in core/gallery/gallery.go that validates only the initial gallery config URL. Attackers can submit a config URL through POST /models/apply that redirects to internal or cloud metadata addresses, receiving those internal responses as gallery content.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| LocalAI | LocalAI | v4.6.0 – ≤ v4.11.0 | — |
References
- https://github.com/mudler/LocalAI/pull/12791 patch issue-tracking
- https://github.com/mudler/LocalAI/blob/v4.11.0/core/gallery/gallery.go#L26-L57 technical-description
- https://github.com/mudler/LocalAI/blob/v4.11.0/pkg/downloader/uri.go#L196-L212 technical-description
- https://github.com/mudler/LocalAI/blob/v4.11.0/pkg/httpclient/client.go#L81-L92 technical-description
- VulnCheck Advisory: LocalAI v4.6.0 through v4.11.0 SSRF Guard Bypass via HTTP Redirects third-party-advisory