CVE-2024-6095: SSRF and Partial LFI in /models/apply Endpoint in mudler/localai

Severity: medium (CVSS 5.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2024-07-06 · updated 2026-06-17
Weakness: CWE-918

Description

A vulnerability in the /models/apply endpoint of mudler/localai versions 2.15.0 allows for Server-Side Request Forgery (SSRF) and partial Local File Inclusion (LFI). The endpoint supports both http(s):// and file:// schemes, where the latter can lead to LFI. However, the output is limited due to the length of the error message. This vulnerability can be exploited by an attacker with network access to the LocalAI instance, potentially allowing unauthorized access to internal HTTP(s) servers and partial reading of local files. The issue is fixed in version 2.17.

Affected products

mudler/localai: before 2.17.0 — fixed in 2.17.0

How to fix

Upgrade to a fixed version: mudler/localai 2.17.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2024-6095 or the next vulnerability affects your stack