LocalAI < 4.6.0 - Server-Side Request Forgery
CVE-2026-59707
Early Release
Description
LocalAI before 4.6.0 is affected by an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint. The gallery `url` field is passed to the gallery config fetcher without validation, allowing an unauthenticated attacker to make the server issue HTTP requests to arbitrary internal, loopback, link-local, and cloud-metadata addresses. The outcome of the server-side fetch is reflected in the model-apply job status.
Severity
Critical
CVSS Score
9.3
Exploit Probability
0%
Affected Product
localai
Published Date
October 20, 2026
Template Author
ashish-cybersec
CVE-2026-59707.yaml
9.3Score
CVSS Metrics
CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVE ID:
cve-2026-59707
CWE ID:
cwe-918
Remediation Steps
Upgrade to LocalAI 4.6.0 or later, which validates gallery config URLs and rejects requests to internal network addresses.