Disclosure summary
LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint that allows attackers to fetch arbitrary internal URLs. The endpoint passes unsanitized gallery URL fields directly to gallery.GetGalleryConfigFromURLWithContext without proper validation, enabling attackers to force the server to issue HTTP GET requests to private and loopback ranges with partial response content leaked through error messages.
Source-specific records & product guidance
Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.
GitHub Reviewed Security Advisories · GHSA-8c5q-hx4g-qq23
Open original source · Updated Oct 02, 2026
LocalAI POST /models/apply permits unauthenticated server-side request forgery through gallery URLs
Source severity: CRITICAL / 9.2
| Ecosystem | Package | Affected range | First patched |
|---|---|---|---|
| go | github.com/mudler/LocalAI | < 1.40.1-0.20260703213242-2cbb3c96b34d | 1.40.1-0.20260703213242-2cbb3c96b34d |
Original records & references
- NIST NVD record
- CVE Program record
- github.com — Reviewed advisory
PUBLISHED 2026-07-07T17:31:36-04:00
MODIFIED 2026-10-02T15:14:46-04:00
INGESTED 2026-10-06T11:45:17-04:00