Mudler Localai vulnerabilities

• mudler localai, mudler/localai +1 more Cross-Site Scripting (XSS) in mudler/localai CVE-2024-9900 Fix available 5.4 MediumMarch 20, 2025
• mudler localai LocalAI Cross-site Scripting vulnerability CVE-2024-48057 6.1 MediumNovember 4, 2024
• mudler localai, mudler/localai +1 more Timing Attack in mudler/localai CVE-2024-7010 7.5 HighOctober 29, 2024
• mudler localai, mudler/localai +1 more Arbitrary File Write in mudler/LocalAI CVE-2024-6868 8.1 HighOctober 29, 2024
• mudler localai, mudler/localai +1 more Remote Code Execution in mudler/localai CVE-2024-6983 8.8 HighSeptember 27, 2024
• mudler localai, mudler/localai +1 more SSRF and Partial LFI in /models/apply Endpoint in mudler/localai CVE-2024-6095 Public exploit 5.8 MediumJuly 6, 2024
• mudler localai, mudler/localai +1 more CSRF Vulnerability in mudler/LocalAI CVE-2024-5616 4.3 MediumJuly 6, 2024
• mudler localai, mudler/localai +1 more Command Injection in mudler/localai CVE-2024-5181 9.8 CriticalJune 26, 2024
• mudler localai, mudler/localai +1 more Path Traversal in mudler/localai CVE-2024-5182 Fix available EPSS 25.5% 7.5 HighJune 19, 2024
• mudler localai, mudler/localai +1 more Command Injection in mudler/localai CVE-2024-2029 Fix available 9.8 CriticalApril 10, 2024
• mudler localai, mudler/localai +1 more Cross-Site Request Forgery (CSRF) Vulnerability in mudler/localai CVE-2024-3135 6.5 MediumApril 1, 2024