PT-2026-56257 · Localai · Localai

George Chen · Published 2026-07-07 · Updated 2026-07-07 · CVE-2026-59707

NVD

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint that allows attackers to fetch arbitrary internal URLs. The endpoint passes unsanitized gallery URL fields directly to gallery.GetGalleryConfigFromURLWithContext without proper validation, enabling attackers to force the server to issue HTTP GET requests to private and loopback ranges with partial response content leaked through error messages.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-59707

Affected Products

Localai

References · 5

• https://github.com/mudler/LocalAI/commit/f9b968e19d7cbc556d59dceb2e0e450b828a3fda · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-59707 · Security Note
• https://github.com/mudler/LocalAI · Note
• https://github.com/mudler/LocalAI/issues/10665 · Note
• https://vulncheck.com/advisories/localai-server-side-request-forgery-via-post-models-apply · Note