CVE-2026-59707

LocalAI - Server-Side Request Forgery via POST /models/apply

9.2 CriticalFix available

LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint that allows attackers to fetch arbitrary internal URLs. The endpoint passes unsanitized gallery URL fields directly to gallery.GetGalleryConfigFromURLWithContext without proper validation, enabling attackers to force the server to issue HTTP GET requests to private and loopback ranges with partial response content leaked through error messages.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: None

Exploit likelihood

1.38%Up 1.0 points since Jul 8, 2026

What each source reports

CVE List Score used 9.2

LocalAI - Server-Side Request Forgery via POST /models/apply

Record: CVE-2026-59707
CVSS 4.0: 9.2 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
CVSS 3.1: 8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Weakness: CWE-918
Updated: 2026-11-02

EUVDEUVD-2026-42097 9.2

Record: EUVD-2026-42097
CVSS 4.0: 9.2 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
Updated: 2026-11-02

GitHub AdvisoriesGHSA-8c5q-hx4g-qq23 9.2

LocalAI POST /models/apply permits unauthenticated server-side request forgery through gallery URLs

Record: GHSA-8c5q-hx4g-qq23
CVSS 4.0: 9.2 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
CVSS 3.1: 8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Weakness: CWE-918
Updated: 2026-11-02

NVD 9.2

Record: CVE-2026-59707
CVSS 4.0: 9.2 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1: 8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Weakness: CWE-918
Updated: 2026-11-02

OSV 9.2

LocalAI - Server-Side Request Forgery via POST /models/apply

Record: CVE-2026-59707
CVSS 4.0: 9.2 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
Weakness: CWE-918
Updated: 2026-11-02

OSVGHSA-8c5q-hx4g-qq23 9.2

LocalAI POST /models/apply permits unauthenticated server-side request forgery through gallery URLs

Record: GHSA-8c5q-hx4g-qq23
CVSS 4.0: 9.2 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
CVSS 3.1: 8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Weakness: CWE-918
Updated: 2026-11-02

OSVGO-2026-6645 No score

LocalAI POST /models/apply permits unauthenticated server-side request forgery through gallery URLs in github.com/mudler/LocalAI

LocalAI POST /models/apply permits unauthenticated server-side request forgery through gallery URLs in github.com/mudler/LocalAI

Record: GO-2026-6645
Updated: 2026-11-02

Affected products

localai

Affected packages

Affected packages
Package	Affected	Fixed
`github.com/mudler/LocalAI` Go	before 1.40.1-0.20260703213242-2cbb3c96b34d	1.40.1-0.20260703213242-2cbb3c96b34d

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Nuclei	LocalAI < 4.6.0 - Server-Side Request Forgery

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, Nuclei, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-59707 is a critical vulnerability (CVSS 9.2) in Localai, published July 7, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.38%, the 72nd percentile. Fixed in github.com/mudler/LocalAI 1.40.1-0.20260703213242-2cbb3c96b34d.