{"id":"CVE-2026-114493","title":"LocalAI v4.6.0 through v4.11.0 SSRF Guard Bypass via HTTP Redirects","summary":"LocalAI v4.6.0 through v4.11.0 contains a server-side request forgery vulnerability in core/gallery/gallery.go that validates only the initial gallery config URL. Attackers can submit a config URL through POST /models/apply that redirect…","severity":"high","cvss":8.6,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","cvssSource":"cna","cwe":["CWE-918"],"vendor":"LocalAI","product":"LocalAI","affected":["LocalAI >= v4.6.0 <= v4.11.0"],"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"partial","timestamp":"2026-10-21T19:50:08.805954Z"},"published":"2026-10-21","updated":"2026-10-21","sourceUpdated":"2026-10-21T19:50:15.052Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-114493","references":[{"url":"https://github.com/mudler/LocalAI/pull/12791"},{"url":"https://github.com/mudler/LocalAI/blob/v4.11.0/core/gallery/gallery.go#L26-L57"},{"url":"https://github.com/mudler/LocalAI/blob/v4.11.0/pkg/downloader/uri.go#L196-L212"},{"url":"https://github.com/mudler/LocalAI/blob/v4.11.0/pkg/httpclient/client.go#L81-L92"},{"url":"https://www.vulncheck.com/advisories/localai-4.6.0-through-4.11.0-ssrf-guard-bypass-via-http-redirects","label":"VulnCheck Advisory: LocalAI v4.6.0 through v4.11.0 SSRF Guard Bypass via HTTP Redirects"}],"tags":["cve.org"],"ingestedAt":"2026-10-21T18:09:27.269Z","slug":"CVE-2026-114493","body":"## Overview\n\nLocalAI v4.6.0 through v4.11.0 contains a server-side request forgery vulnerability in core/gallery/gallery.go that validates only the initial gallery config URL. Attackers can submit a config URL through POST /models/apply that redirects to internal or cloud metadata addresses, receiving those internal responses as gallery content.\n\n## Affected\n\n- `LocalAI >= v4.6.0 <= v4.11.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":47,"depthScoreParts":{"impact":47.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}