CVE-2026-114493

Received Received - Intake

Server-Side Request Forgery in LocalAI Gallery Configuration

Publication date: 2026-10-21

Last updated on: 2026-10-21

Assigner: VulnCheck

Description

LocalAI v4.6.0 through v4.11.0 contains a server-side request forgery vulnerability in core/gallery/gallery.go that validates only the initial gallery config URL. Attackers can submit a config URL through POST /models/apply that redirects to internal or cloud metadata addresses, receiving those internal responses as gallery content.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-21

Last Modified

2026-10-21

Generated

2026-11-10

AI Q&A

2026-10-22

EPSS Evaluated

2026-11-09

NVD

CVE-2026-114493

EUVD

EUVD-2026-107421

Affected Vendors & Products

Vendor	Product	Version / Range
LocalAI	LocalAI	v4.6.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-918	The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

Executive Summary

This is a server-side request forgery (SSRF) vulnerability in LocalAI v4.6.0 through v4.11.0. The application only validates the initial gallery config URL in core/gallery/gallery.go. Attackers can submit a URL via POST /models/apply that redirects to internal or cloud metadata addresses, receiving those internal responses as gallery content. This bypasses SSRF protections by leveraging HTTP redirects.

Detection Guidance

To detect this vulnerability, monitor network traffic for unexpected outbound requests to internal or cloud metadata addresses from LocalAI processes. Check LocalAI logs for POST requests to /models/apply with URLs that redirect. Inspect gallery configurations for suspicious URLs in core/gallery/gallery.go.

Impact Analysis

An attacker could exploit this to access internal network resources or cloud metadata services by tricking the application into making unauthorized requests. This could lead to data breaches, credential harvesting, or further network compromise depending on the exposed services.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection principles and HIPAA's security requirements for protected health information. Organizations using affected LocalAI versions may face compliance violations, legal penalties, and reputational damage.

Mitigation Strategies

Upgrade LocalAI to a patched version beyond v4.11.0. If upgrading is not possible, apply the fix from pull request #12791 which enforces redirect URL validation. Disable or restrict outbound HTTP redirects in LocalAI configurations. Monitor network traffic for SSRF attempts.

Hi! I’m here to help you understand CVE-2026-114493. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...