TI-2024-06481 Aliases CVE-2024-6983 GHSA-v6qv-c78w-ff25

Remote Code Execution in mudler/localai

HIGH 73CWE-94Published 2024-09-27 · Updated 2024-09-27

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.0 · CNA. Fix status from CNA. Impact type from CWE-94.

Summary

mudler/localai version 2.17.1 is vulnerable to remote code execution. The vulnerability arises because the localai backend receives inputs not only from the configuration file but also from other inputs, allowing an attacker to upload a binary file and execute malicious code. This can lead to the attacker gaining full control over the system.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.01289 70th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed mudler/localai (mudler): 2.19.4

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
mudler	mudler/localai	before 2.19.4	2.19.4	Patch available	CNA

mudler/localai Vendormudler Affected before 2.19.4 Fixed in 2.19.4 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:mudler:localai:2.17.1:::::::*	2.17.1	Vulnerable	mudler

cpe:2.3:a:mudler:localai:2.17.1:*:*:*:*:*:*:* Versions 2.17.1 Vulnerable ·mudler

Remediation

Fix · CNA mudler/localai (mudler) Fixed in 2.19.4

Timeline

2026-10-02 Threatist record created from CVE-2024-6983
2026-10-03 Alias added: GHSA-v6qv-c78w-ff25

References

Exploit 1

https://huntr.com/bounties/f91fb287-412e-4c89-87df-9e4b6e609647

Patch 1

https://github.com/mudler/localai/commit/d02a0f6f01d5c4a926a2d67190cb55d7aca23b66

TI-2024-04809 Command Injection in mudler/localai CVSS 3.0CRITICAL 9.8
TI-2024-01889 Command Injection in mudler/localai CVSS 3.0CRITICAL 9.8
TI-2024-04810 Path Traversal in mudler/localai CVSS 3.1CRITICAL 9.1
TI-2024-06369 Arbitrary File Write in mudler/LocalAI CVSS 3.1CRITICAL 9.8
TI-2024-06505 Timing Attack in mudler/localai CVSS 3.1MEDIUM 5.9
TI-2024-05648 SSRF and Partial LFI in /models/apply Endpoint in mudler/localai CVSS 3.1MEDIUM 5.8

See all 10 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences