CVE-2026-114493

HighCVSS 8.6

Published: 21/10/2026(UTC)Updated: 22/10/2026(UTC)Translated: 22/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

31th percentile - higher than 31% of all known CVEs

Summary

LocalAI v4.6.0 through v4.11.0 contains a server-side request forgery vulnerability in core/gallery/gallery.go that validates only the initial gallery config URL. Attackers can submit a config URL through POST /models/apply that redirects to internal or cloud metadata addresses, receiving those internal responses as gallery content.

Risk Assessment

An attacker can reach internal services and cloud metadata, potentially leading to credential leakage and further escalation.

Recommendation

Upgrade LocalAI to a version later than 4.11.0 and restrict outbound requests to internal networks and metadata addresses.

Other vulnerabilities in LocalAI

CVE-2026-59707High
LocalAI has an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint, allowing attackers to fetch arbitrary internal URLs. Unsanitized gallery URL fields are passed directly to gallery.GetGalleryConfigFromURLWithContext, enabling HTTP GET requests to private and loopback ranges with partial response leakage via error messages.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS