CVE-2026-114493
CRITICAL
9,2
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A
HIGH
8,6
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: changed
Confidentiality: high
Integrity: none
Availability: none
Description
AI Translation Available
LocalAI v4.6.0 through v4.11.0 contains a server-side request forgery vulnerability in core/gallery/gallery.go that validates only the initial gallery config URL. Attackers can submit a config URL through POST /models/apply that redirects to internal or cloud metadata addresses, receiving those internal responses as gallery content.
918
Server-Side Request Forgery (SSRF)
IncompleteCommon Consequences
Security Scopes Affected:
Confidentiality
Integrity
Access Control
Potential Impacts:
Read Application Data
Execute Unauthorized Code Or Commands
Bypass Protection Mechanism
Applicable Platforms
Technologies:
Web Based, AI/ML, Web Server
https://github.com/mudler/LocalAI/blob/v4.11.0/core/gallery/gallery.go#L26-L57
https://github.com/mudler/LocalAI/blob/v4.11.0/pkg/downloader/uri.go#L196-L212
https://github.com/mudler/LocalAI/blob/v4.11.0/pkg/httpclient/client.go#L81-L92
https://github.com/mudler/LocalAI/pull/12791
https://www.vulncheck.com/advisories/localai-4.6.0-through-4.11.0-ssrf-guard-by…