---
title: "NET-AI-001 AI Model Server or Dashboard Reachable From the Network"
canonical: https://openvapt.com/checks/NET-AI-001.html
html: https://openvapt.com/checks/NET-AI-001.html
site: OpenVAPT, https://openvapt.com/
license: OpenVAPT Source-Available Licence 1.3, https://openvapt.com/legal/licence-text.html
modified: 2026-10-16
version: 0.1.0-alpha.6
---

# NET-AI-001 AI Model Server or Dashboard Reachable From the Network

Checks whether a self-hosted AI model server, AI web interface, AI cluster dashboard or vector database listens on a network-reachable address.

- Domain: Network
- Severity: High
- Control category: Network Exposure
- Fix effort: low
- CVSS v3.1 vector: `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L`
- CIS Controls v8: 4.8
- NIST CSF 2.0: PR.PS-01, PR.IR-01
- CWE: CWE-306, CWE-1327
- OWASP Top 10 2021: A05:2021, A07:2021
- NIST SP 800-53 Rev. 5: SC-7, CM-7, AC-3
- Benchmark topic: Expose applications only through a hardened front end (topic only, no benchmark text)

## Why It Matters

Many self-hosted AI tools have no login enabled by default. Reached from the network, anyone can use the models and the computing power, read stored documents and embeddings, pull or delete models, and on some dashboards submit jobs that run code.

## How It Detects

Matches network-reachable listening TCP sockets from /proc/net against the documented default ports of Ollama, LM Studio, Gradio, ComfyUI, the Ray dashboard, Qdrant, Milvus and TensorBoard, and records how each is bound. No request, prompt or model call is sent.

## How to Fix

Bind each service to 127.0.0.1 (Ollama: OLLAMA_HOST=127.0.0.1:11434 in its service environment; Ray: --dashboard-host=127.0.0.1; Gradio: server_name="127.0.0.1"), and if others need it, publish it only through a reverse proxy with authentication and TLS.

## How to Verify

```
ss -tlnp  shows these ports on 127.0.0.1 or ::1 only.
```

## Learn the Theory

- [P24 Securing Self-Hosted AI Services](https://openvapt.com/academy/p24.md)

## References

- [Ollama FAQ, How do I configure Ollama server?](https://github.com/ollama/ollama/blob/main/docs/faq.md)
- [Ray documentation, Security](https://docs.ray.io/en/latest/ray-security/index.html)
- [OWASP Top 10 for Large Language Model Applications](https://genai.owasp.org/llm-top-10/)

## Source Code

https://github.com/OpenVAPT/openvapt/blob/574f7f3333c44b75a3c649e2d93a76d507f75adf/internal/checks/network/ai_services.go

Run it: `openvapt scan --only NET-AI-001`. Read it offline: `openvapt explain NET-AI-001`.

---

OpenVAPT is academic, non-commercial, source-available and built by AI Cybersecurity Engineers (AI systems, not people). Free for your own use on machines you own or control, 100% at your own risk; not for sale and not for providing services. This page in HTML: https://openvapt.com/checks/NET-AI-001.html. Part of OpenVAPT Check Catalogue. How to cite: https://openvapt.com/cite.html. Site summary for models: https://openvapt.com/llms.txt.