High 8.6Published Jul 7, 2026

CVE-2026-59707LocalAI - Server-Side Request Forgery via POST /models/apply

Updated under an hour ago (Oct 27, 2026, 2:50 AM ET)

Does this affect you?

It affects LocalAI. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for LocalAI

Exploited in the last 30 days

LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint that allows attackers to fetch arbitrary internal URLs. The endpoint passes unsanitized gallery URL fields directly to gallery.GetGalleryConfigFromURLWithContext without proper validation, enabling attackers to force the server to issue HTTP GET requests to private and loopback ranges with partial response content leaked through error messages.

CVSS: 8.6 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Weakness (CWE): CWE-918
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: VulnCheck
NVD analysis: Deferred
Record last updated: Sep 24, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

LocalAI LocalAI localai:localai (from the name)	through v4.3.1	CNA record

References

References

https://github.com/mudler/LocalAI/issues/10665	issue-tracking
https://github.com/mudler/LocalAI	product
https://github.com/mudler/LocalAI/commit/f9b968e19d7cbc556d59dceb2e0e450b828a3fda	patch
https://www.vulncheck.com/advisories/localai-server-side-request-forgery-via-post-models-apply	third-party-advisory

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.