CVE-2026-59707

HIGH 8.6

LocalAI - Server-Side Request Forgery via POST /models/apply

CVSS Score

8.6

EPSS Score

0.4%

EPSS Percentile

28th

LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint that allows attackers to fetch arbitrary internal URLs. The endpoint passes unsanitized gallery URL fields directly to gallery.GetGalleryConfigFromURLWithContext without proper validation, enabling attackers to force the server to issue HTTP GET requests to private and loopback ranges with partial response content leaked through error messages.

CWE	CWE-918
Vendor	localai
Product	localai
Published	Jul 7, 2026
Last Updated	Jul 14, 2026

Stay Ahead of the Next One

Get instant alerts for localai localai

Be the first to know when new high vulnerabilities affecting localai localai are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

None

Availability

None

Affected Versions

LocalAI / LocalAI

0 ≤ v4.3.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/mudler/LocalAI/issues/10665 github.com: https://github.com/mudler/LocalAI github.com: https://github.com/mudler/LocalAI/commit/f9b968e19d7cbc556d59dceb2e0e450b828a3fda vulncheck.com: https://www.vulncheck.com/advisories/localai-server-side-request-forgery-via-post-models-apply

Credits

🔍 George Chen