Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

mudler/LocalAI

              master @ 9c7c997
            

Fixes

CVEs

CRITICAL

Peak severity

37.8%

Coverage

Highlights

Denial of Service: 27 prior fixes. Scrutinize any change in this area.

backend/cpp/llama-cpp/grpc-server.cpp: most-fixed (3 issues). Treat as high-risk during review.

44 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Denial of Service: Most frequent class; arises from unbounded resources, panics, infinite loops, and hangs on client-supplied inputs or network operations.

Auth Bypass: Multiple fail-open defaults and missing checks across HTTP, gRPC, NATS, and UI; includes IDOR and OAuth invite bypasses.

Path Traversal: Recurring in tar extraction, file:// downloads, model paths, and config-driven paths; often due to missing canonicalization or prefix checks. or IsAbs shortcuts.