CVE-2024-5182: Path Traversal in localai

The path traversal vulnerability in localai allows an attacker to bypass intended directory restrictions and delete files outside of the expected scope. By crafting a malicious request with a manipulated model parameter, an attacker can traverse the file system and target critical files, including configuration files, user data, or even system binaries. This could lead to complete system compromise, data exfiltration, or denial of service. The impact is particularly severe if the localai instance is deployed in a production environment or handles sensitive user data. The ability to delete arbitrary files represents a significant escalation of privileges.

1. Reserved2024-05-21
2. Published2024-06-19
3. Modified2024-08-01
4. EPSS updated2026-04-02

The primary mitigation for CVE-2024-5182 is to upgrade to localai version 2.16.0 or later, which includes the necessary input validation fixes. If upgrading immediately is not feasible, consider implementing temporary workarounds such as restricting access to the model deletion endpoint, implementing stricter file system permissions, or employing a Web Application Firewall (WAF) to filter malicious requests. Monitor system logs for suspicious activity related to file deletion attempts. After upgrading, confirm the fix by attempting to delete a file outside the intended directory using a crafted request; the operation should be denied.