PT-2024-23993 · Unknown · Mudler/Localai

Published 2024-04-01 · Updated 2025-06-27 · CVE-2024-3135

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions mudler/localai (affected versions not specified)

Description A Cross-Site Request Forgery (CSRF) issue exists, allowing attackers to craft malicious webpages that perform unauthorized actions on a victim's local LocalAI instance without consent. This enables attackers to exhaust system resources, consume credits, and fill disk space by making numerous resource-intensive API calls, such as generating images or uploading files. The issue stems from the application's acceptance of simple request content-types without requiring CSRF tokens or implementing other CSRF mitigation measures. Successful exploitation does not require network access to the vulnerable LocalAI environment.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2024-3135

GHSA-JHVF-7C85-3C9G

GO-2024-2705

Affected Products

Mudler/Localai

References · 11

• 🔥 https://huntr.com/bounties/7afdc4d3-4b68-45ea-96d0-cf9ed3712ae8 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-3135 · Security Note
• https://osv.dev/vulnerability/GO-2024-2705 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-3135 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-jhvf-7c85-3c9g · Vendor Advisory
• https://github.com/mudler/LocalAI · Note
• https://t.me/cvenotify/75380 · Telegram Post
• https://github.com/advisories/GHSA-jhvf-7c85-3c9g · Note
• https://t.me/cvenotify/126906 · Telegram Post
• https://t.me/cvenotify/76920 · Telegram Post
• https://t.me/cvenotify/75476 · Telegram Post