Live › vulnerability › CVE-2026-114493
Go to dashboardLocalAI validates only the first gallery config URL, so a request to POST /models/apply can redirect the server to internal addresses or cloud metadata endpoints. An attacker can read those internal responses back as gallery content, which can expose cloud credentials.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| LocalAI | github | >= 4.6.0, <= 4.11.0 | – |
Check the LocalAI version the team runs: if it is between v4.6.0 and v4.11.0 inclusive, it is affected.
v4.11.0; the fixed version is unknown from the sourcesEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
LocalAI v4.6.0 through v4.11.0 contains a server-side request forgery vulnerability in core/gallery/gallery.go that validates only the initial gallery config URL. Attackers can submit a config URL through POST /models/apply that redirects to internal or cloud metadata addresses, receiving those internal responses as gallery content.
This page as .md · .json · in your agent: get_signal("CVE-2026-114493")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.