High severity · published Jul 7, 2026
CVE-2026-59707
LocalAI - Server-Side Request Forgery via POST /models/apply
8.6
CVSS
1.4%
EPSS
No
On KEV
Description
LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint that allows attackers to fetch arbitrary internal URLs. The endpoint passes unsanitized gallery URL fields directly to gallery.GetGalleryConfigFromURLWithContext without proper validation, enabling attackers to force the server to issue HTTP GET requests to private and loopback ranges with partial response content leaked through error messages.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LO
LocalAI · LocalAI
through v4.3.1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-59707
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-59707
github.com
https://github.com/mudler/LocalAI
github.com
https://github.com/mudler/LocalAI/commit/f9b968e19d7cbc556d59dceb2e0e450b828a3fda
github.com
https://github.com/mudler/LocalAI/issues/10665
www.vulncheck.com
https://www.vulncheck.com/advisories/localai-server-side-request-forgery-via-post-models-apply
More from LocalAI
8.6
CVE-2026-114493
LocalAI v4.6.0 through v4.11.0 SSRF Guard Bypass via HTTP Redirects