CVE-2024-9900 Cross-Site Scripting (XSS) in mudler/localai

What is CVE-2024-9900?

CVE-2024-9900 is a medium-severity cross-site scripting vulnerability in mudler/localai, published on 20 Mar 2025. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

mudler/localai version v2.21.1 contains a Cross-Site Scripting (XSS) vulnerability in its search functionality. The vulnerability arises due to improper sanitization of user input, allowing the injection and execution of arbitrary JavaScript code. This can lead to the execution of malicious scripts in the context of the victim's browser, potentially compromising user sessions, stealing session cookies, redirecting users to malicious websites, or manipulating the DOM.

Weakness: CWE-79

Which versions are affected by CVE-2024-9900?

3 open source packages ship an affected version, including github.com/mudler/LocalAI. It affects 1 product.

Products include Mudler Localai.

How do I fix CVE-2024-9900?

Upgrade github.com/mudler/LocalAI to 2.22.0 or later.

Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.

Is CVE-2024-9900 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-9900 exists.

Other vulnerabilities in mudler/localai

• CVE-2024-5181 Command Injection in mudler/localai Critical 9.8
• CVE-2024-2029 Command Injection in mudler/localai Critical 9.8
• CVE-2024-6983 Remote Code Execution in mudler/localai High 8.8
• CVE-2024-6868 Arbitrary File Write in mudler/LocalAI High 8.1
• CVE-2024-7010 Timing Attack in mudler/localai High 7.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-w6hh-w36c-vxmw, GO-2025-3542.