CVE-2026-59707

HIGH

LocalAI - Server-Side Request Forgery via POST /models/apply

Title source: cna

Description

LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint that allows attackers to fetch arbitrary internal URLs. The endpoint passes unsanitized gallery URL fields directly to gallery.GetGalleryConfigFromURLWithContext without proper validation, enabling attackers to force the server to issue HTTP GET requests to private and loopback ranges with partial response content leaked through error messages.

References (4)

Core 4

Core References

Issue Tracking issue-tracking

GitHub Issue

https://github.com/mudler/LocalAI/issues/10665

Product product

Product

https://github.com/mudler/LocalAI

Patch patch

https://github.com/mudler/LocalAI/commit/f9b968e19d7cbc556d59dceb2e0e450b828a3fda

View Patch ZIP pw:eip

Third Party Advisory third-party-advisory

https://www.vulncheck.com/advisories/localai-server-side-request-forgery-via-post-models-apply

Scores

CVSS v3 8.6

EPSS 0.0036

EPSS Percentile 28.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact partial

Details

CWE

CWE-918

Status published

Products (1)

LocalAI/LocalAI < v4.3.1

Published Jul 07, 2026

Tracked Since Jul 08, 2026