Goal Reached Thanks to every supporter β€” we hit 100%!

Goal: 1000 CNY Β· Raised: 1000 CNY

100.0%

CVE-2024-6095 β€” AI Deep Analysis Summary

Q1What is this vulnerability? (Essence + Consequences)

🚨 **What is this vulnerability?** LocalAI (v2.15.0) has a critical flaw in the `/models/apply` API. It suffers from **SSRF** (Server-Side Request Forgery) and **LFI** (Local File Inclusion).…

Q2Root Cause? (CWE/Flaw)

πŸ›‘οΈ **Root Cause? (CWE/Flaw)** The issue is classified as **CWE-918** (Server-Side Request Forgery). The vulnerability stems from improper validation of input schemes.…

Q3Who is affected? (Versions/Components)

πŸ‘₯ **Who is affected? (Versions/Components)** **Vendor:** mudler **Product:** mudler/localai **Affected Version:** Specifically **v2.15.0**. Users running this specific version are at risk. πŸ“¦

Q4What can hackers do? (Privileges/Data)

πŸ’° **What can hackers do? (Privileges/Data)** Attackers with network access can: 1. **Access Internal Servers:** Probe internal HTTP(s) services via SSRF. 2.…

Q5Is exploitation threshold high? (Auth/Config)

πŸ”“ **Is exploitation threshold high? (Auth/Config)** **No, it's relatively low.** The attacker only needs **network access** to the LocalAI instance.…

Q6Is there a public Exp? (PoC/Wild Exploitation)

πŸ”₯ **Is there a public Exp? (PoC/Wild Exploitation)** **Yes.** Proof of Concept (PoC) code is available on GitHub (e.g., by Abdurahmon3236).…

Q7How to self-check? (Features/Scanning)

πŸ” **How to self-check? (Features/Scanning)** 1. **Check Version:** Verify if you are running LocalAI v2.15.0. 2. **Scan:** Use Nuclei templates targeting CVE-2024-6095. 3.…

Q8Is it fixed officially? (Patch/Mitigation)

βœ… **Is it fixed officially? (Patch/Mitigation)** **Yes.** The vulnerability is fixed in **version 2.17**. The developer (mudler) released a patch (commit 2fc6fe8) to address the SSRF and LFI issues. πŸ› οΈ

Q9What if no patch? (Workaround)

🚧 **What if no patch? (Workaround)** If you cannot upgrade immediately: 1. **Restrict Network Access:** Block external access to the `/models/apply` endpoint. 2.…

Q10Is it urgent? (Priority Suggestion)

⚑ **Is it urgent? (Priority Suggestion)** **High Priority.** Since PoCs are public and the impact includes data leakage and internal network probing, you should **upgrade to v2.17 immediately** or apply strict network r…