Read the docs
TI-2024-04810 Aliases CVE-2024-5182GHSA-cpcx-r2gq-x893

Path Traversal in mudler/localai

Priority HIGH 78CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and GitHub.

Summary

A path traversal vulnerability exists in mudler/localai version 2.14.0, where an attacker can exploit the `model` parameter during the model deletion process to delete arbitrary files. Specifically, by crafting a request with a manipulated `model` parameter, an attacker can traverse the directory structure and target files outside of the intended directory, leading to the deletion of sensitive data. This vulnerability is due to insufficient input validation and sanitization of the `model` parameter.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.25538 97th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed mudler/localai (mudler): 2.16.0github.com/go-skynet/LocalAI (Go): 2.16.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
mudlermudler/localaibefore 2.16.02.16.0Patch availableCNA
—github.com/go-skynet/LocalAI (Go)before 2.16.02.16.0Patch availableGHSA-cpcx-r2gq-x893
  • mudler/localai Vendormudler Affected before 2.16.0 Fixed in 2.16.0 Patch available CNA
  • github.com/go-skynet/LocalAI (Go) Vendor— Affected before 2.16.0 Fixed in 2.16.0 Patch available GHSA-cpcx-r2gq-x893

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:mudler:localai:*:*:*:*:*:*:*:*before 2.16.0Vulnerablemudler
  • cpe:2.3:a:mudler:localai:*:*:*:*:*:*:*:* Versions before 2.16.0 Vulnerable ·mudler

Remediation

  • Fix · CNA mudler/localai (mudler) Fixed in 2.16.0
  • Fix · GHSA-cpcx-r2gq-x893 github.com/go-skynet/LocalAI (Go) Fixed in 2.16.0 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-5182
  2. 2026-10-03 Alias added: GHSA-cpcx-r2gq-x893

References

Exploit 1

Patch 1

Advisory 1

Other 1

  • TI-2024-04809 Command Injection in mudler/localai CVSS 3.0CRITICAL 9.8
  • TI-2024-01889 Command Injection in mudler/localai CVSS 3.0CRITICAL 9.8
  • TI-2024-06369 Arbitrary File Write in mudler/LocalAI CVSS 3.1CRITICAL 9.8
  • TI-2024-06481 Remote Code Execution in mudler/localai CVSS 3.0HIGH 8.8
  • TI-2024-06505 Timing Attack in mudler/localai CVSS 3.1MEDIUM 5.9
  • TI-2024-05648 SSRF and Partial LFI in /models/apply Endpoint in mudler/localai CVSS 3.1MEDIUM 5.8
See all 10 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences