Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-59707— LocalAI - Server-Side Request Forgery via POST /models/apply

Quick assessment

Affected
LocalAI LocalAI
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Ettore Di Giacinto LocalAI是意大利Ettore Di Giacinto个人开发者的一款本地人工智能推理平台。 Ettore Di Giacinto LocalAI v4.3.1及之前版本存在服务端请求伪造漏洞，该漏洞源于POST /models/apply端点对gallery URL字段未经清理直接传递给gallery.GetGalleryConfigFromURLWithContext，导致服务端请求伪造，允许未经身份验证的攻击者强制服务器向内部私有地址和回环地址发起HTTP

CVSS 8.6 · High EPSS 0.48% · P41

Possible ATT&CK Techniques 1 AI

T1557 · Adversary-in-the-Middle

Affected Version Matrix 1

VendorProduct Version RangeStatus
LocalAI LocalAI ≤ v4.3.1 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-59707

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
LocalAI - Server-Side Request Forgery via POST /models/apply
Source: CVE Program / CVE List V5
Vulnerability Description
LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint that allows attackers to fetch arbitrary internal URLs. The endpoint passes unsanitized gallery URL fields directly to gallery.GetGalleryConfigFromURLWithContext without proper validation, enabling attackers to force the server to issue HTTP GET requests to private and loopback ranges with partial response content leaked through error messages.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
服务端请求伪造(SSRF)
Source: CVE Program / CVE List V5
Vulnerability Title
Ettore Di Giacinto LocalAI 服务端请求伪造漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Ettore Di Giacinto LocalAI是意大利Ettore Di Giacinto个人开发者的一款本地人工智能推理平台。 Ettore Di Giacinto LocalAI v4.3.1及之前版本存在服务端请求伪造漏洞，该漏洞源于POST /models/apply端点对gallery URL字段未经清理直接传递给gallery.GetGalleryConfigFromURLWithContext，导致服务端请求伪造，允许未经身份验证的攻击者强制服务器向内部私有地址和回环地址发起HTTP
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
LocalAI LocalAI 0 ~ v4.3.1 -

II. Public POCs for CVE-2026-59707

# POC Description Source Link Shenlong Link
AI-Generated POC Premium
Qwen3.6-35B-A3B · 7923 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month

III. Intelligence Information for CVE-2026-59707

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-59707 (1)

Proof of Concept for CVE-2026-59707 (1)

Other References for CVE-2026-59707 (1)

IV. Related Vulnerabilities

Same product: LocalAI
Same vendor: LocalAI
Same weakness: CWE-918

V. Comments for CVE-2026-59707

No comments yet

Leave a comment