CVE-2026-59707CWE-918

LocalAI - Server-Side Request Forgery via POST /models/apply

Critical · published July 7, 2026

CVSS v4.0
9.2
EPSS
0%
Percentile
40.6
In the wild
Unconfirmed
What it is

LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint that allows attackers to fetch arbitrary internal URLs. The endpoint passes unsanitized gallery URL fields directly to gallery.GetGalleryConfigFromURLWithContext without proper validation, enabling attackers to force the server to issue HTTP GET requests to private and loopback ranges with partial response content leaked through error messages.

The record
Technical detail
CVSS v4.0
9.2 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
EPSS
0.00482 · 40.6th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2026-07-07T20:37Z
EPSS history
Timeline
  • 07 JUL 20:37Z
    LocalAI - Server-Side Request Forgery via POST /models/apply
    cvelistv5