Description
LocalAI v4.6.0 through v4.11.0 contains a server-side request forgery vulnerability in core/gallery/gallery.go that validates only the initial gallery config URL. Attackers can submit a config URL through POST /models/apply that redirects to internal or cloud metadata addresses, receiving those internal responses as gallery content.
References
- www.cve.org/CVERecord ↗
- nvd.nist.gov/vuln/detail/CVE-2026-114493 ↗
- github.com/mudler/LocalAI/blob/v4.11.0/core/gallery/gallery.go ↗
- github.com/mudler/LocalAI/blob/v4.11.0/pkg/downloader/uri.go ↗
- github.com/mudler/LocalAI/blob/v4.11.0/pkg/httpclient/client.go ↗
- github.com/mudler/LocalAI/pull/12791 ↗
- www.vulncheck.com/advisories/localai-4.6.0-through-4.11.0-ssrf-guard-bypass-via-http-redirects ↗
Related CVEs
← CVE Index: search every CVE from the last 30 days
This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.