PT-2024-36727 · Mudler · Localai

Published 2024-07-06 · Updated 2025-07-15 · CVE-2024-5616

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions mudler/LocalAI versions up to and including 2.15.0

Description A Cross-Site Request Forgery (CSRF) vulnerability exists, allowing attackers to trick victims into deleting installed models by crafting a malicious HTML page. This can cause the deletion of a model, such as gpt-4-vision-preview, without the victim's consent. The issue is due to insufficient CSRF protection mechanisms on the model deletion functionality.

Recommendations For mudler/LocalAI versions up to and including 2.15.0, consider disabling the model deletion functionality until a patch is available to prevent exploitation. Restrict access to the model deletion API endpoint to minimize the risk of exploitation. Avoid using the model deletion feature until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2024-5616

Affected Products

Localai

References · 9

• 🔥 https://huntr.com/bounties/fd753fb6-ba04-4dd8-abef-918fb97120af · Exploit
• https://github.com/mudler/localai/commit/4e1463fec291612a59a16db60b3fd12d4c49d64b · Patch
• https://osv.dev/vulnerability/CVE-2024-5616 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-5616 · Security Note
• https://twitter.com/CVEnew/status/1809510472539840812 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1809534722252370331 · Twitter Post
• https://t.me/cvedetector/140 · Telegram Post
• https://t.me/cvenotify/128982 · Telegram Post
• https://t.me/cvenotify/85300 · Telegram Post