localGPT vulnerabilities

3 known vulnerabilities in localGPT from PromtEngineer. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  localGPT: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2026-5002Mar 28, 2026PromtEngineer

  A vulnerability has been found in PromtEngineer localGPT up to 4d41c7d1713b16b216d8e062e51a5dd88b20b054. The impacted element is the function _route_using_overviews of the file backend/server.py of the component LLM Prompt Handler. Such manipulation leads to i

• 7.3 High severity

  localGPT: Improper Access Control

  CVE-2026-5001Mar 28, 2026PromtEngineer

  A flaw has been found in PromtEngineer localGPT up to 4d41c7d1713b16b216d8e062e51a5dd88b20b054. The affected element is the function do_POST of the file backend/server.py. This manipulation causes unrestricted upload. The attack is possible to be carried out r

• 7.3 High severity

  localGPT: Improper Authentication

  CVE-2026-5000Mar 28, 2026PromtEngineer

  A vulnerability was detected in PromtEngineer localGPT up to 4d41c7d1713b16b216d8e062e51a5dd88b20b054. Impacted is the function LocalGPTHandler of the file backend/server.py of the component API Endpoint. The manipulation of the argument BaseHTTPRequestHandler