Live › vulnerability › CVE-2026-59707
Go to dashboardLocalAI's POST /models/apply endpoint takes gallery URLs without validation, so anyone who can reach it can make the server send HTTP GET requests to internal and loopback addresses. Partial response content comes back in error messages, which can expose internal services.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:13 UTC, 0h before NVD. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| github.com/mudler/LocalAI | go | < 1.40.1-0.20260703213242-2cbb3c96b34d | 1.40.1-0.20260703213242-2cbb3c96b34d |
1.40.1-0.20260703213242-2cbb3c96b34d or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint that allows attackers to fetch arbitrary internal URLs. The endpoint passes unsanitized gallery URL fields directly to gallery.GetGalleryConfigFromURLWithContext without proper validation, enabling attackers to force the server to issue HTTP GET requests to private and loopback ranges with partial response content leaked through error messages.
This page as .md · .json · in your agent: get_signal("CVE-2026-59707")
Go Vulnerability Database, CC-BY 4.0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.