Sillytavern vulnerabilities

Products

• Sillytavern 13

Newest

• sillytavern SillyTavern 1.12.13 through 1.19.0 Pre-Authentication Denial of Service via Body Parsing CVE-2026-108545 8.2 HighOctober 10, 2026
• sillytavern SillyTavern: SSRF in SearXNG Search Proxy via Unvalidated baseUrl CVE-2026-46372 Fix available 8.5 HighMay 19, 2026
• sillytavern SillyTavern: SSRF vulnerability in the CORS proxy middleware CVE-2026-44652 Fix available 6.9 MediumMay 12, 2026
• sillytavern SillyTavern: Reflected XSS vulnerability in the CORS proxy middleware CVE-2026-44651 Fix available 6.9 MediumMay 12, 2026
• sillytavern SillyTavern: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-44650 Fix available 9.1 CriticalMay 12, 2026
• sillytavern SillyTavern: Authentication Bypass via SSO Header Injection CVE-2026-44649 Fix available 9.8 CriticalMay 12, 2026
• sillytavern SillyTavern: Existing sessions are not invalidated after password change, allowing session reuse and account takeover CVE-2026-44648 Public exploitFix available 7.5 HighMay 12, 2026
• sillytavern SillyTavern: Incomplete IP validation in /api/search/visit allows SSRF via localhost and IPv6 CVE-2026-34526 Fix available 5.0 MediumApril 1, 2026
• sillytavern SillyTavern: Path traversal in `/api/chats/export` and `/api/chats/delete` allows arbitrary file read/delete within user data root CVE-2026-34524 Fix available 8.3 HighApril 1, 2026
• sillytavern SillyTavern: Path traversal allows file existence oracle CVE-2026-34523 Fix available 5.3 MediumApril 1, 2026
• sillytavern SillyTavern: Path traversal in `/api/chats/import` allows arbitrary file write outside intended chat directory CVE-2026-34522 Fix available 8.1 HighApril 1, 2026
• sillytavern SillyTavern has Server-Side Request Forgery (SSRF) via Asset Download Endpoint that Allows Reading Internal Services CVE-2026-26286 7.1 HighFebruary 19, 2026
• sillytavern SillyTavern Web Interface Vulnerable to DNS Rebinding CVE-2025-59159 Fix available 9.7 CriticalOctober 6, 2025