What’s Vulnerable › Products

mudler/localai vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your mudler/localai version is affected

Latest mudler/localai vulnerabilities

• CVE-2024-9900 — Cross-Site Scripting (XSS) in mudler/localai (CVSS 6.1)
• CVE-2024-48057 — (CVSS 6.1)
• CVE-2024-7010 — Timing Attack in mudler/localai (CVSS 5.9)
• CVE-2024-6868 — Arbitrary File Write in mudler/LocalAI (CVSS 9.8)
• CVE-2024-6983 — Remote Code Execution in mudler/localai (CVSS 8.8)
• CVE-2024-6095 — SSRF and Partial LFI in /models/apply Endpoint in mudler/localai (CVSS 5.8)
• CVE-2024-5616 — CSRF Vulnerability in mudler/LocalAI (CVSS 4.3)
• CVE-2024-5181 — Command Injection in mudler/localai (CVSS 9.8)
• CVE-2024-5182 — Path Traversal in mudler/localai (CVSS 9.1)
• CVE-2024-2029 — Command Injection in mudler/localai (CVSS 9.8)
• CVE-2024-3135 — Cross-Site Request Forgery (CSRF) Vulnerability in mudler/localai (CVSS 6.5)