# LocalAI v4.10.0 — Release & Upgrade Intelligence
- **Product:** LocalAI (https://localai.io)
- **Version:** v4.10.0
- **Released:** Sep 17, 2026
- **Impact Score:** 5/10
- **Breaking Changes:** Not verified
- **Canonical Analysis:** https://changelogs.us/localai/updates/v4.10.0/

## Executive Summary (TL;DR)
LocalAI v4.10.0. Source highlight: 🎉 LocalAI 4.10.0 Release! 🚀

## New Features
- **`stablediffusion-ggml` builds a ROCm variant.** A ROCm build of the stable-diffusion ggml backend, extending accelerator coverage beyond CUDA and Metal.
- **Scheduling rules editable in place.** Distributed scheduling rules can now be edited in place in the UI rather than through a round-trip to the config file.
- **Scheduling rules keyed by model alias.** Distributed scheduling rules can be keyed by a model alias, not just a model name, so aliased models participate in scheduling correctly.
- **OCI layer download resumption.** Interrupted OCI layer downloads resume rather than restarting from scratch.
- **Progress updates no longer throttle downloads.** Status updates were throttling downloads; the progress path is now bounded so it does not compete with the transfer.
- **Node operation controls restored.** The node detail page's operation controls (drain, resume, remove) are restored after a regression that hid them, and backend actions are tested through their menu.

## Bug Fixes
- 🛡️ **Four CVEs patched** - ip-address 10.3.1 (CVE-2026-69192), containerd 1.7.32 and 1.7.33 (CVE-2026-46680, CVE-2026-53488), and react-router (GHSA-qwww-vcr4-c8h2).
- 🍎 **Apple M5 SIGSEGV fixed** - `go-m1cpu` bumped to v0.2.2, fixing a segmentation fault on Apple M5 hardware at startup.
- **XIO copy buffer size is configurable.** The copy buffer size for XIO transfers is now configurable rather than fixed.
- `fix`: upgrade ip-address to 10.3.1 (CVE-2026-69192) - #11632
- `fix`: upgrade containerd to 1.7.32 (CVE-2026-46680) - #11634
- `fix`: upgrade react-router to 7.18.2, 8.3.0 (GHSA-qwww-vcr4-c8h2) - #11644