LocalAI
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| LocalAI | 2 | – | Oct 21, 2026 |
Exploited and recent CVEs
- CVE-2026-114493 LocalAI v4.6.0 through v4.11.0 SSRF Guard Bypass via HTTP Redirects 0.4%
- CVE-2026-59707 LocalAI - Server-Side Request Forgery via POST /models/apply 1.4%