GitHub Advisoryadvisory · Go

GHSA-8c5q-hx4g-qq23 LocalAI POST /models/apply permits unauthenticated server-side request forgery through gallery URLs

CRITICAL Published 2026-07-07 Modified 2026-10-02 Official page ↗
Aliases
CVE-2026-59707
Ecosystem
Go
Packages
github.com/mudler/LocalAI
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Weaknesses
CWE-918
Reviewed
2026-10-02

Affected packages

• Go github.com/mudler/LocalAI: < 1.40.1-0.20260703213242-2cbb3c96b34d → fixed in 1.40.1-0.20260703213242-2cbb3c96b34d

Description

LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint that allows attackers to fetch arbitrary internal URLs. The endpoint passes unsanitized gallery URL fields directly to gallery.GetGalleryConfigFromURLWithContext without proper validation, enabling attackers to force the server to issue HTTP GET requests to private and loopback ranges with partial response content leaked through error messages.

Related

Alias · CVE (1)

  • CVE-2026-59707 LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint that allows attackers to… vulnerability

Weakness · CWE (1)

  • CWE-918 Server-Side Request Forgery weakness

References