PatchTheCVECVE-2024-6095: A vulnerability in the /models/apply endpoint of mudler/localai versions 2.15.0 allows for Server-Side Request
CVE-2024-6095 is a medium-severity flaw (CVSS 5.8) affecting localai. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A vulnerability in the /models/apply endpoint of mudler/localai versions 2.15.0 allows for Server-Side Request Forgery (SSRF) and partial Local File Inclusion (LFI). The endpoint supports both http(s):// and file:// schemes, where the latter can lead to LFI. However, the output is limited due to the length of the error message. This vulnerability can be exploited by an attacker with network access to the LocalAI instance, potentially allowing una
Why this priority
- Public exploit reference
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 5.8 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 2.6% (top 14%) |
| CISA exploited list | No |
| Weakness | CWE-918 |
| Published | 2024-07-06 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Public exploits and detection
Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.
- Nuclei scan template: LocalAI - Partial Local File Read
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-6095?
localai: upgrade to 2.17.0. Exact commands for each OS are on this page.
Is CVE-2024-6095 being exploited?
CVE-2024-6095 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2024-6095 affect?
CVE-2024-6095 affects localai. Severity is medium (CVSS 5.8). A vulnerability in the /models/apply endpoint of mudler/localai versions 2.15.0 allows for Server-Side Request Forgery (SSRF) and partial Local File Inclusion (LFI). The endpoint supports both http(s):// and file:// schemes, where the latte
How urgent is CVE-2024-6095?
Priority 52/100. Public exploit reference; Remotely exploitable, no login, no user action
Related CVEs
- CVE-2024-9900 MEDIUM 6.1 DOWNGRADE mudler/localai version v2.21.1 contains a Cross-Site Scripting (XSS) vulnerability in its search functionality
- CVE-2024-7010 MEDIUM 5.9 DOWNGRADE mudler/localai version 2.17.1 is vulnerable to a Timing Attack
- CVE-2024-6983 HIGH 8.8 DOWNGRADE mudler/localai version 2.17.1 is vulnerable to remote code execution
- CVE-2024-6868 CRITICAL 9.8 DOWNGRADE mudler/LocalAI version 2.17.1 allows for arbitrary file write due to improper handling of automatic archive ex
- CVE-2024-5616 MEDIUM 4.3 UPGRADE A Cross-Site Request Forgery (CSRF) vulnerability exists in mudler/LocalAI versions up to and including 2.15.0