https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 05:47:14 +0000 https://cve.radiocsirt.org/vuln/cve-2024-5616 <p><strong>Affected:</strong> mudler/localai, mudler localai</p> <p>A Cross-Site Request Forgery (CSRF) vulnerability exists in mudler/LocalAI versions up to and including 2.15.0, which allows attackers to trick victims into deleting installed models. By crafting a malicious HTML page, an attacker can cause the deletion of a model, such as &#39;gpt-4-vision-preview&#39;, without the victim&#39;s consent. The vulnerability is due to insufficient CSRF protection mechanisms on the model deletion functionality.</p> <p><strong>Affected:</strong> mudler/localai, mudler localai</p> <p>A Cross-Site Request Forgery (CSRF) vulnerability exists in mudler/LocalAI versions up to and including 2.15.0, which allows attackers to trick victims into deleting installed models. By crafting a malicious HTML page, an attacker can cause the deletion of a model, such as &#39;gpt-4-vision-preview&#39;, without the victim&#39;s consent. The vulnerability is due to insufficient CSRF protection mechanisms on the model deletion functionality.</p> https://cve.radiocsirt.org/vuln/cve-2024-5616