PT-2025-12296 · Localai · Localai

Published 2025-03-20 · Updated 2025-03-20 · CVE-2024-9901

Positive Technologies (AI Summary)

CVSS v3.1

3.4

Low

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions LocalAI version v2.19.4

Description The issue arises from the delete model API improperly neutralizing input during web page generation, leading to a one-time storage cross-site scripting (XSS) vulnerability. This allows an attacker to store a malicious payload that executes when a user accesses the homepage. The presence of cross-site request forgery (CSRF) can also enable automated malicious requests.

Recommendations For LocalAI version v2.19.4, consider disabling the delete model API until a patch is available to prevent exploitation of the XSS vulnerability. Restrict access to the homepage to minimize the risk of malicious payload execution. Avoid using the delete model API in conjunction with any functionality that may be vulnerable to CSRF to prevent automated malicious requests.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-9901

Affected Products

Localai

References · 5

• https://osv.dev/vulnerability/CVE-2024-9901 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-9901 · Security Note
• https://github.com/mudler/localai/commit/a1634b219a4e52813e70ff07e6376a01449c4515 · Note
• https://huntr.com/bounties/31332c23-ea89-4176-ba57-388cf6008945 · Note
• https://twitter.com/CVEnew/status/1902671036212219905 · Twitter Post