Advisories · Technology

mudler/localai.

Every CVE that names mudler/localai among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-7010 CVE record

CVSS 7.5 High

Timing Attack in mudler/localai
- mudler/localai
- CWE-208
Not analysed yet 29 Oct 2024
CVE-2024-6868 CVE record

CVSS 8.1 High

Arbitrary File Write in mudler/LocalAI
- mudler/localai
- Path traversal
Not analysed yet 29 Oct 2024
CVE-2024-6983 CVE record

CVSS 8.8 High

Remote Code Execution in mudler/localai
- mudler/localai
- Code injection
Not analysed yet 27 Sept 2024
CVE-2024-6095 CVE record

CVSS 5.8 Medium

SSRF and Partial LFI in /models/apply Endpoint in mudler/localai
- mudler/localai
- Server-side request forgery (SSRF)
Not analysed yet 6 Jul 2024
CVE-2024-5616 CVE record

CVSS 4.3 Medium

CSRF Vulnerability in mudler/LocalAI
- mudler/localai
- Cross-site request forgery (CSRF)
Not analysed yet 6 Jul 2024
CVE-2024-5181 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Command Injection in mudler/localai
- mudler/localai
- Command injection
Not analysed yet 26 Jun 2024