BuildRiot
Sign in

AISource: LocalAI

LocalAI released 4.12.1 to tighten security checks on user-supplied media URLs

LocalAI released a security-only patch that checks media URL redirects and connects to validated IP addresses when using the default transport. [1] Given these fixes, BuildRiot recommends prioritizing upgrades for deployments accepting user-supplied image, audio or video URLs.

By News DeskPublished here (UTC)2 min read
LocalAI logo
Cover: BuildRiot

LocalAI released version 4.12.1 on October 23, 2026, to tighten security checks when fetching user-supplied media URLs. The security-only patch covers chat vision image, audio and video URLs, plus image and audio endpoints, according to the release notes. Sources: LocalAI

The merged pull request identifies three gaps: unchecked redirects, incomplete IP classification and separate DNS lookups that could return different addresses during validation and connection. The release notes say the patch checks every redirect destination and treats 100.64.0.0/10 and 0.0.0.0/8 as non-public. It connects to an address that passed validation when using the default transport. Sources: LocalAI

The change applies httpclient.WithExternalOnly() to four download clients. Their default transport rejects non-public resolutions and bypasses environment proxies. According to the pull request, a custom transport supplied through WithTransport must enforce the address policy itself. Redirect checks still apply. Sources: LocalAI

Internal clients retain their existing behavior, according to the pull request. LocalAI’s release announcement does not specify the earliest affected version, a CVE identifier or severity score, or whether exploitation occurred. Sources: LocalAI

What to do

  1. Given these security fixes, BuildRiot recommends prioritizing upgrades to LocalAI 4.12.1 for deployments accepting user-supplied media URLs, then retesting legitimate retrieval and redirect workflows.
  2. Check integrations using httpclient.WithExternalOnly() for dependencies on environment proxies, which its default transport bypasses.
  3. Ensure any custom transport supplied through WithTransport enforces the address policy, and test blocking across redirects and changing DNS answers. Sources: LocalAI

Why it matters

The patch addresses paths through which user-supplied media URLs could reach private destinations. Developers using custom HTTP transports still need to enforce the address policy themselves.

Attribution

Sources

  1. 1LocalAIRelease v4.12.1Source published (UTC)
  2. 2LocalAI[httpclient] validate redirect targets and pin dialed addresses for user URLs

Read the original source for full details and context.

Report a problem

Links, dates or what you expected. Do not include passwords or private data.

More on AI

All AI stories

Review · AI

Resend launches Inboxes for shared, programmable email workflows

Resend describes Inboxes as shared, programmable email inboxes where teams and connected agents can work on conversations. The company announced it on October 22, 2026. It says Inboxes adds conversation management to email receiving infrastructure introduced in 2025. According to Resend, developers can create addresses on their own domains, retrieve conversations, reply within threads, and respond to webhook events. The company also describes assignments, internal notes, and collaborative drafts. Built-in agents have configurable instructions and permitted actions, according to Resend.

Resend

Review · AI

Kimi K3.1 Pro: hosted coding model with lower published rates than K3

Moonshot AI’s Kimi K3.1 Pro has lower published input and output rates than Kimi K3. Moonshot describes Pro as further post-training of K3. It claims a one-million-token context window and improvements in coding and agent tasks. Vercel lists Pro on AI Gateway with a release date of October 23, 2026. It documents AI SDK, Chat Completions, Responses and Anthropic Messages access. Vercel lists vision, tool use and structured outputs for Pro. Hosted access is available; Moonshot promises downloadable weights “by Nov 4.”

Moonshot AI