CVE-2024-5616 - Vulnerability Details - OpenCVE

A Cross-Site Request Forgery (CSRF) vulnerability exists in mudler/LocalAI versions up to and including 2.15.0, which allows attackers to trick victims into deleting installed models. By crafting a malicious HTML page, an attacker can cause the deletion of a model, such as 'gpt-4-vision-preview', without the victim's consent. The vulnerability is due to insufficient CSRF protection mechanisms on the model deletion functionality.

No CVSS v4.0

No CVSS v3.1

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction Required

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Mudler	Localai

Configuration 1 [-]

cpe:2.3:a:mudler:localai:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://github.com/mudler/localai/commit/4e1463fec291612a59a16db60b3fd12d4c49d64b
https://huntr.com/bounties/fd753fb6-ba04-4dd8-abef-918fb97120af

History

Wed, 16 Jul 2025 13:45:00 +0000

Type	Values Removed	Values Added
Metrics	epss `{'score': 0.00047}`	epss `{'score': 0.00051}`

Tue, 15 Jul 2025 13:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Mudler Mudler localai
CPEs		cpe:2.3:a:mudler:localai::::::::
Vendors & Products		Mudler Mudler localai

MITRE

Status: PUBLISHED

Assigner: @huntr_ai

Published: 2024-07-06T08:38:02.339Z

Updated: 2024-08-01T21:18:06.438Z

Reserved: 2024-06-04T02:49:35.920Z

Link: CVE-2024-5616

Vulnrichment

Updated: 2024-08-01T21:18:06.438Z

NVD

Status : Analyzed

Published: 2024-07-06T09:15:02.050

Modified: 2025-07-15T13:24:01.330

Link: CVE-2024-5616

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-5616", "assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a", "state": "PUBLISHED", "assignerShortName": "@huntr_ai", "dateReserved": "2024-06-04T02:49:35.920Z", "datePublished": "2024-07-06T08:38:02.339Z", "dateUpdated": "2024-08-01T21:18:06.438Z"}, "containers": {"cna": {"title": "CSRF Vulnerability in mudler/LocalAI", "providerMetadata": {"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a", "shortName": "@huntr_ai", "dateUpdated": "2024-07-06T08:38:02.339Z"}, "descriptions": [{"lang": "en", "value": "A Cross-Site Request Forgery (CSRF) vulnerability exists in mudler/LocalAI versions up to and including 2.15.0, which allows attackers to trick victims into deleting installed models. By crafting a malicious HTML page, an attacker can cause the deletion of a model, such as 'gpt-4-vision-preview', without the victim's consent. The vulnerability is due to insufficient CSRF protection mechanisms on the model deletion functionality."}], "affected": [{"vendor": "mudler", "product": "mudler/localai", "versions": [{"version": "unspecified", "lessThan": "2.17", "status": "affected", "versionType": "custom"}]}], "references": [{"url": "https://huntr.com/bounties/fd753fb6-ba04-4dd8-abef-918fb97120af"}, {"url": "https://github.com/mudler/localai/commit/4e1463fec291612a59a16db60b3fd12d4c49d64b"}], "metrics": [{"cvssV3_0": {"version": "3.0", "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "baseScore": 4.3, "baseSeverity": "MEDIUM"}}], "problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-352 Cross-Site Request Forgery (CSRF)", "cweId": "CWE-352"}]}], "source": {"advisory": "fd753fb6-ba04-4dd8-abef-918fb97120af", "discovery": "EXTERNAL"}}, "adp": [{"affected": [{"vendor": "mudler", "product": "localai", "cpes": ["cpe:2.3:a:mudler:localai:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "2.17", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-07-22T17:54:12.569883Z", "id": "CVE-2024-5616", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-22T17:56:07.120Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T21:18:06.438Z"}, "title": "CVE Program Container", "references": [{"url": "https://huntr.com/bounties/fd753fb6-ba04-4dd8-abef-918fb97120af", "tags": ["x_transferred"]}, {"url": "https://github.com/mudler/localai/commit/4e1463fec291612a59a16db60b3fd12d4c49d64b", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://huntr.com/bounties/fd753fb6-ba04-4dd8-abef-918fb97120af", "tags": ["x_transferred"]}, {"url": "https://github.com/mudler/localai/commit/4e1463fec291612a59a16db60b3fd12d4c49d64b", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T21:18:06.438Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-5616", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-07-22T17:54:12.569883Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:mudler:localai:*:*:*:*:*:*:*:*"], "vendor": "mudler", "product": "localai", "versions": [{"status": "affected", "version": "0", "lessThan": "2.17", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-22T17:56:02.380Z"}}], "cna": {"title": "CSRF Vulnerability in mudler/LocalAI", "source": {"advisory": "fd753fb6-ba04-4dd8-abef-918fb97120af", "discovery": "EXTERNAL"}, "metrics": [{"cvssV3_0": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "mudler", "product": "mudler/localai", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "2.17", "versionType": "custom"}]}], "references": [{"url": "https://huntr.com/bounties/fd753fb6-ba04-4dd8-abef-918fb97120af"}, {"url": "https://github.com/mudler/localai/commit/4e1463fec291612a59a16db60b3fd12d4c49d64b"}], "descriptions": [{"lang": "en", "value": "A Cross-Site Request Forgery (CSRF) vulnerability exists in mudler/LocalAI versions up to and including 2.15.0, which allows attackers to trick victims into deleting installed models. By crafting a malicious HTML page, an attacker can cause the deletion of a model, such as 'gpt-4-vision-preview', without the victim's consent. The vulnerability is due to insufficient CSRF protection mechanisms on the model deletion functionality."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-352", "description": "CWE-352 Cross-Site Request Forgery (CSRF)"}]}], "providerMetadata": {"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a", "shortName": "@huntr_ai", "dateUpdated": "2024-07-06T08:38:02.339Z"}}}, "cveMetadata": {"cveId": "CVE-2024-5616", "state": "PUBLISHED", "dateUpdated": "2024-08-01T21:18:06.438Z", "dateReserved": "2024-06-04T02:49:35.920Z", "assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a", "datePublished": "2024-07-06T08:38:02.339Z", "assignerShortName": "@huntr_ai"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mudler:localai:*:*:*:*:*:*:*:*", "matchCriteriaId": "C8EE2A5F-041F-485E-A41E-F97BC43D0C34", "versionEndIncluding": "2.15.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A Cross-Site Request Forgery (CSRF) vulnerability exists in mudler/LocalAI versions up to and including 2.15.0, which allows attackers to trick victims into deleting installed models. By crafting a malicious HTML page, an attacker can cause the deletion of a model, such as 'gpt-4-vision-preview', without the victim's consent. The vulnerability is due to insufficient CSRF protection mechanisms on the model deletion functionality."}, {"lang": "es", "value": " Existe una vulnerabilidad de Cross Site Request Forgery (CSRF) en las versiones de mudler/LocalAI hasta la 2.15.0 incluida, que permite a los atacantes enga\u00f1ar a las v\u00edctimas para que eliminen los modelos instalados. Al crear una p\u00e1gina HTML maliciosa, un atacante puede provocar la eliminaci\u00f3n de un modelo, como 'gpt-4-vision-preview', sin el consentimiento de la v\u00edctima. La vulnerabilidad se debe a mecanismos de protecci\u00f3n CSRF insuficientes en la funcionalidad de eliminaci\u00f3n del modelo."}], "id": "CVE-2024-5616", "lastModified": "2025-07-15T13:24:01.330", "metrics": {"cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "[email protected]", "type": "Secondary"}]}, "published": "2024-07-06T09:15:02.050", "references": [{"source": "[email protected]", "tags": ["Patch"], "url": "https://github.com/mudler/localai/commit/4e1463fec291612a59a16db60b3fd12d4c49d64b"}, {"source": "[email protected]", "tags": ["Exploit", "Third Party Advisory"], "url": "https://huntr.com/bounties/fd753fb6-ba04-4dd8-abef-918fb97120af"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://github.com/mudler/localai/commit/4e1463fec291612a59a16db60b3fd12d4c49d64b"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://huntr.com/bounties/fd753fb6-ba04-4dd8-abef-918fb97120af"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-352"}], "source": "[email protected]", "type": "Secondary"}]}