LocalAI (V4.6.0 - V4.11.0) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/localai-v4.6.0---v4.11.0/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 21 Oct 2026 19:57:50 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgLocalAI: Server-side request forgery (CVE-2026-114493)https://feed.craftedsignal.io/briefs/2026-10-localai-ssrf/Wed, 21 Oct 2026 19:57:50 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-localai-ssrf/LocalAI versions 4.6.0 through 4.11.0 are vulnerable to server-side request forgery (SSRF) allowing attackers to exfiltrate internal metadata via malicious configuration URLs.LocalAI versions 4.6.0 through 4.11.0 contain a server-side request forgery (SSRF) vulnerability in the core gallery component. The application fails to properly validate redirect targets when processing gallery configuration URLs, allowing an attacker to submit a URL via the /models/apply endpoint that redirects to internal or cloud provider metadata services. This enables the attacker to receive and view sensitive internal responses.

Impact

Successful exploitation allows an unauthorized attacker to perform SSRF, potentially accessing sensitive cloud metadata services or internal network resources that are otherwise not exposed to the public internet.

Recommendation

  • Upgrade LocalAI to a version beyond 4.11.0 to address the insecure URL validation in core/gallery/gallery.go.
  • Implement egress filtering on the host machine running LocalAI to block unauthorized access to cloud metadata IP addresses (e.g., 169.254.169.254) and internal network segments.
  • Audit and restrict access to the /models/apply endpoint to trusted administrative accounts.
]]>highadvisoryssrfwebservercloud