LocalAI - SSRF (CVE-2026-59707)

CVE-2026-59707 is a critical unauthenticated server-side request forgery (SSRF) vulnerability in LocalAI’s POST /models/apply endpoint. Attackers can make the server send requests to arbitrary internal, private, or loopback URLs, potentially exposing partial response data through error messages and enabling reconnaissance of otherwise inaccessible systems.

CrowdSec has been tracking this vulnerability and its exploits since 26th of October 2026.

CrowdSec network observations suggest that most exploitation of CVE-2026-59707 involves focused reconnaissance to identify viable targets. Attackers typically tailor their campaigns based on system exposure and configuration. It is unlikely that a given attack is accidental. Data from the CrowdSec community also indicates a gradual decrease in attacks targeting CVE-2026-59707. While still present in the wild, exploitation levels have dropped noticeably week-over-week. This may signal that the vulnerability is becoming less relevant or that defenses are improving fast enough for attackers to lose interest.

Attackers target the POST /models/apply endpoint and supply a crafted URL in the JSON url field, causing the server to make requests to attacker-controlled or internal network resources. The fetched result may be reflected in the model-apply job status.