CVE-2026-59707 Details
Description
LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint that allows attackers to fetch arbitrary internal URLs. The endpoint passes unsanitized gallery URL fields directly to gallery.GetGalleryConfigFromURLWithContext without proper validation, enabling attackers to force the server to issue HTTP GET requests to private and loopback ranges with partial response content leaked through error messages.
A server-side request forgery (SSRF) vulnerability has been identified in LocalAI versions through 4.3.1, within the POST /models/apply endpoint. This vulnerability allows attackers to access arbitrary internal URLs. The issue arises because the endpoint transmits unsanitized gallery URL fields directly to a function that retrieves gallery configurations, without adequate validation. As a result, attackers can manipulate the server into making HTTP GET requests to private and loopback address ranges, with some response content potentially leaked through error messages.
Users can update to LocalAI version 4.6.0 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jul 7, 2026CISA-ADP
Assessed Jul 8, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/mudler/LocalAI/issues/10665 | CISA-ADP | ExploitIssue TrackingTechnical DescriptionVendor |
| https://github.com/mudler/LocalAI | [email protected] | Source CodeVendor |
| https://github.com/mudler/LocalAI/commit/f9b968e19d7cbc556d59dceb2e0e450b828a3fda | [email protected] | Source CodeVendor |
| https://github.com/mudler/LocalAI/issues/10665 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://www.vulncheck.com/advisories/localai-server-side-request-forgery-via-post-models-apply | [email protected] | AdvisoryRemedy |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-918 | Server-Side Request Forgery (SSRF) | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| LocalAI | <= 4.3.1 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 8, 2026 | CVE Modified | CISA-ADP |
| Jul 7, 2026 | New CVE Received | [email protected] |