{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/localai-v4.6.0---v4.11.0/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:localai:localai:4.6.0:*:*:*:*:*:*:*","cpe:2.3:a:localai:localai:4.11.0:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.6,"id":"CVE-2026-114493"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["LocalAI (v4.6.0 - v4.11.0)"],"_cs_severities":["high"],"_cs_tags":["ssrf","webserver","cloud"],"_cs_type":"advisory","_cs_vendors":["LocalAI"],"content_html":"\u003cp\u003eLocalAI versions 4.6.0 through 4.11.0 contain a server-side request forgery (SSRF) vulnerability in the core gallery component. The application fails to properly validate redirect targets when processing gallery configuration URLs, allowing an attacker to submit a URL via the /models/apply endpoint that redirects to internal or cloud provider metadata services. This enables the attacker to receive and view sensitive internal responses.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an unauthorized attacker to perform SSRF, potentially accessing sensitive cloud metadata services or internal network resources that are otherwise not exposed to the public internet.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade LocalAI to a version beyond 4.11.0 to address the insecure URL validation in core/gallery/gallery.go.\u003c/li\u003e\n\u003cli\u003eImplement egress filtering on the host machine running LocalAI to block unauthorized access to cloud metadata IP addresses (e.g., 169.254.169.254) and internal network segments.\u003c/li\u003e\n\u003cli\u003eAudit and restrict access to the /models/apply endpoint to trusted administrative accounts.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-21T19:57:50Z","date_published":"2026-10-21T19:57:50Z","id":"https://feed.craftedsignal.io/briefs/2026-10-localai-ssrf/","summary":"LocalAI versions 4.6.0 through 4.11.0 are vulnerable to server-side request forgery (SSRF) allowing attackers to exfiltrate internal metadata via malicious configuration URLs.","title":"LocalAI: Server-side request forgery (CVE-2026-114493)","url":"https://feed.craftedsignal.io/briefs/2026-10-localai-ssrf/"}],"language":"en","title":"CraftedSignal Threat Feed - LocalAI (V4.6.0 - V4.11.0)","version":"https://jsonfeed.org/version/1.1"}