Read the docs
TI-2024-09185 Aliases CVE-2024-9900GHSA-w6hh-w36c-vxmw

Cross-Site Scripting (XSS) in mudler/localai

Priority MEDIUM 60CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
Low · Low · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and GitHub. Impact type from CWE-79.

Summary

mudler/localai version v2.21.1 contains a Cross-Site Scripting (XSS) vulnerability in its search functionality. The vulnerability arises due to improper sanitization of user input, allowing the injection and execution of arbitrary JavaScript code. This can lead to the execution of malicious scripts in the context of the victim's browser, potentially compromising user sessions, stealing session cookies, redirecting users to malicious websites, or manipulating the DOM.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00536 45th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed mudler/localai (mudler): 2.22.0github.com/mudler/LocalAI (Go): 2.22.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
mudlermudler/localaibefore 2.22.02.22.0Patch availableCNA
—github.com/mudler/LocalAI (Go)before 2.22.02.22.0Patch availableGHSA-w6hh-w36c-vxmw
  • mudler/localai Vendormudler Affected before 2.22.0 Fixed in 2.22.0 Patch available CNA
  • github.com/mudler/LocalAI (Go) Vendor— Affected before 2.22.0 Fixed in 2.22.0 Patch available GHSA-w6hh-w36c-vxmw

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:mudler:localai:2.21.1:*:*:*:*:*:*:*2.21.1Vulnerablemudler
  • cpe:2.3:a:mudler:localai:2.21.1:*:*:*:*:*:*:* Versions 2.21.1 Vulnerable ·mudler

Remediation

  • Fix · CNA mudler/localai (mudler) Fixed in 2.22.0
  • Fix · GHSA-w6hh-w36c-vxmw github.com/mudler/LocalAI (Go) Fixed in 2.22.0 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-9900
  2. 2026-10-03 Alias added: GHSA-w6hh-w36c-vxmw

References

Exploit 1

Patch 1

Advisory 1

Other 1

  • TI-2024-04809 Command Injection in mudler/localai CVSS 3.0CRITICAL 9.8
  • TI-2024-01889 Command Injection in mudler/localai CVSS 3.0CRITICAL 9.8
  • TI-2024-04810 Path Traversal in mudler/localai CVSS 3.1CRITICAL 9.1
  • TI-2024-06369 Arbitrary File Write in mudler/LocalAI CVSS 3.1CRITICAL 9.8
  • TI-2024-06481 Remote Code Execution in mudler/localai CVSS 3.0HIGH 8.8
  • TI-2024-06505 Timing Attack in mudler/localai CVSS 3.1MEDIUM 5.9
See all 10 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences