CVE-2024-5182 in the critical feed json
Path Traversal in mudler/localai
published 2024-06-19 2 y ago modified 2026-06-17 4 mo ago also GHSA-cpcx-r2gq-x893 , GO-2024-2938 , EUVD-2024-2025
- cvss
- 7.5
- version 3.0, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 25.5%
- EPSS 25.5% chance of exploitation in 30 days, percentile 97%
- public exploits
- 0
- none known
Summary
A path traversal vulnerability exists in mudler/localai version 2.14.0, where an attacker can exploit the `model` parameter during the model deletion process to delete arbitrary files. Specifically, by crafting a request with a manipulated `model` parameter, an attacker can traverse the directory structure and target files outside of the intended directory, leading to the deletion of sensitive data. This vulnerability is due to insufficient input validation and sanitization of the `model` parameter.
Patch / fix
- go github.com/go-skynet/LocalAI 2.16.0
- mudler mudler/localai 2.16.0
- mudler localai 2.16.0
CISA SSVC
- Exploitation
- Proof of concept is public
- Automatable
- yes
- Technical impact
- partial
- Assessed
- 2 y ago
Exploit prediction
25.54% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- huntr.com https://huntr.com/bounties/f7a87f29-c22a-48e8-9fce-b6d5a273e545 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.0 | 7.5 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| NVD | 3.1 | 9.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H |
| GitHub | 3.0 | 7.5 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| go | github.com/go-skynet/LocalAI | <2.16.0 all versions |
2.16.0 |
Affected products
- mudler mudler/localai
- mudler localai
Classification
- Weakness
-
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory
References
-
github.com
/mudler/localai/commit/1a3dedece06cab1acc3332055d285ac540a47f0e
web, patch
-
huntr.com
/bounties/f7a87f29-c22a-48e8-9fce-b6d5a273e545
web, exploit, issue-tracking, patch
-
nvd.nist.gov
/vuln/detail/CVE-2024-5182
advisory
-
github.com
/mudler/LocalAI
package
-
github.com
/advisories/GHSA-cpcx-r2gq-x893
advisory
Sources
- CVE List CVE-2024-5182
- GitHub Advisory GHSA-cpcx-r2gq-x893
- NVD CVE-2024-5182
- OSV GO-2024-2938
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.