Protect AI ChuanhuChatGPT, LocalAI Vulnerability Disclosures
Date: 2024-10
Affected: ChuanhuChatGPT, LocalAI
Attack vector: tool-abuse
Category: research
Severity: High

Protect AI's huntr platform disclosed critical vulnerabilities in ChuanhuChatGPT, LocalAI, and similar open-source LLM tools enabling auth bypass and unauthorized actions.


Mitigations:

Architectural layers (MAESTRO):