Advisoriesby Ibis
LocalAI security advisories
3 advisories · 1 critical or high in 12 months · latest Jul 7
3 advisories
LocalAI POST /models/apply permits unauthenticated server-side request forgery through gallery URLsCVE-2026-59707fixed in 1.40.1-0.20260703213242-2cbb3c96b34dLocalAI Cross-Site Scripting (XSS) vulnerability in its search functionalityCVE-2024-9900fixed in 2.22.0LocalAI Cross-site Scripting vulnerabilityCVE-2024-48057no fix yetAbout LocalAI
LocalAI is the open-source AI engine. Run any model - LLMs, vision, voice, image, video - on any hardware. No GPU required.
Packages watched: github.com/mudler/LocalAI (Go).