CVE database · LLM gateways and model serving
LocalAI vulnerabilities and CVEs
The Beam CVE database tracks 3 security advisories for LocalAI: 1 critical, 1 medium and 1 low severity. The newest is CVE-2026-59707, published Jul 7, 2026 and fixed in 1.40.1-0.20260703213242-2cbb3c96b34d.
A self-hosted, OpenAI-compatible API for running models locally.
Check your version: go list -m github.com/mudler/LocalAI
- Vulnerabilities tracked
- 3
- Critical
- 1
- Known exploited (CISA KEV)
- 0
- Published in the last 30 days
- 0
All entries, newest first
CVE-2026-59707
LocalAI POST /models/apply permits unauthenticated server-side request forgery through gallery URLs
critical8.6Jul 7, 2026CVE-2024-9900
LocalAI Cross-Site Scripting (XSS) vulnerability in its search functionality
medium5.4Mar 20, 2025CVE-2024-48057
LocalAI Cross-site Scripting vulnerability
low6.1No fixNov 5, 2024