mudler records
11 published records for vendor mudler.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 3
- With a fix record
- 45.5%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2
- CWE-918 Server-Side Request Forgery (SSRF)1
- CWE-208 Observable Timing Discrepancy1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
11 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
44Plan | CVE-2024-5182No exploit | Path Traversal in mudler/localaimudler · localai · CWE-22 | Critical9.1 | — | 25.5% | Jun 19, 2024 |
40Plan | CVE-2024-2029No exploit | Command Injection in mudler/localaimudler · localai · CWE-78 | Critical9.8 | — | 2.9% | Apr 10, 2024 |
40Plan | CVE-2024-5181No exploit | Command Injection in mudler/localaimudler · localai · CWE-78 | Critical9.8 | — | 2.7% | Jun 25, 2024 |
39Monitor | CVE-2024-6868No exploit | Arbitrary File Write in mudler/LocalAImudler · localai · CWE-59 | Critical9.8 | — | 1.5% | Oct 29, 2024 |
35Monitor | CVE-2024-6983No exploit | Remote Code Execution in mudler/localaimudler · localai · CWE-94 | High8.8 | — | 1.3% | Sep 27, 2024 |
26Monitor | CVE-2024-3135No exploit | Cross-Site Request Forgery (CSRF) Vulnerability in mudler/localaimudler · localai · CWE-352 | Medium6.5 | — | 0.3% | Apr 1, 2024 |
24Monitor | CVE-2024-6095Proof of concept | SSRF and Partial LFI in /models/apply Endpoint in mudler/localaimudler · localai · CWE-918 | Medium5.8 | — | 2.7% | Jul 6, 2024 |
24Monitor | CVE-2024-9900No exploit | Cross-Site Scripting (XSS) in mudler/localaimudler · localai · CWE-79 | Medium6.1 | — | 0.5% | Mar 20, 2025 |
24Monitor | CVE-2024-48057No exploit | localai <=2.20.1 is vulnerable to Cross Site Scripting (XSS).mudler · localai · CWE-79 | Medium6.1 | — | 0.2% | Nov 4, 2024 |
23Monitor | CVE-2024-7010No exploit | Timing Attack in mudler/localaimudler · localai · CWE-208 | Medium5.9 | — | 0.5% | Oct 29, 2024 |
17Monitor | CVE-2024-5616No exploit | CSRF Vulnerability in mudler/LocalAImudler · localai · CWE-352 | Medium4.3 | — | 0.3% | Jul 6, 2024 |
- CVE-2024-518244Plan
Path Traversal in mudler/localai
CriticalCVSS 9.1No exploitEPSS 26%mudler · localaiJun 19, 2024
- CVE-2024-202940Plan
Command Injection in mudler/localai
CriticalCVSS 9.8No exploitEPSS 3%mudler · localaiApr 10, 2024
- CVE-2024-518140Plan
Command Injection in mudler/localai
CriticalCVSS 9.8No exploitEPSS 3%mudler · localaiJun 25, 2024
- CVE-2024-686839Monitor
Arbitrary File Write in mudler/LocalAI
CriticalCVSS 9.8No exploitEPSS 2%mudler · localaiOct 29, 2024
- CVE-2024-698335Monitor
Remote Code Execution in mudler/localai
HighCVSS 8.8No exploitEPSS 1%mudler · localaiSep 27, 2024
- CVE-2024-313526Monitor
Cross-Site Request Forgery (CSRF) Vulnerability in mudler/localai
MediumCVSS 6.5No exploitEPSS 0%mudler · localaiApr 1, 2024
- CVE-2024-609524Monitor
SSRF and Partial LFI in /models/apply Endpoint in mudler/localai
MediumCVSS 5.8Proof of conceptEPSS 3%mudler · localaiJul 6, 2024
- CVE-2024-990024Monitor
Cross-Site Scripting (XSS) in mudler/localai
MediumCVSS 6.1No exploitEPSS 1%mudler · localaiMar 20, 2025
- CVE-2024-4805724Monitor
localai <=2.20.1 is vulnerable to Cross Site Scripting (XSS).
MediumCVSS 6.1No exploitEPSS 0%mudler · localaiNov 4, 2024
- CVE-2024-701023Monitor
Timing Attack in mudler/localai
MediumCVSS 5.9No exploitEPSS 1%mudler · localaiOct 29, 2024
- CVE-2024-561617Monitor
CSRF Vulnerability in mudler/LocalAI
MediumCVSS 4.3No exploitEPSS 0%mudler · localaiJul 6, 2024