Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
mudler/localai
master @ 193d0e6
70
Fixes
11
CVEs
CRITICAL
Peak severity
28.9%
Coverage
Highlights
Denial of Service: 28 prior fixes. Scrutinize any change in this area.
core/http/app.go: most-fixed (5 issues). Treat as high-risk during review.
34 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Command Injection: User-supplied filenames can trigger command injection if shell-wrapped instead of being treated as isolated argument lists inside exec.Command. This is linked to the audio-to-Wav conversion pipeline.
Auth Bypass: The application historically failed to enforce global authentication parameters consistently, exposing sensitive endpoints and backend model actions unless authorization middleware was explicitly structured.
Path Traversal: Configuration parameters such as the MMProj field or draft model paths were joined without strict canonicalization, allowing attackers to access files outside the authorized models directory.