SillyTavern vulnerabilities

CVEs per yearBy the year they were published

1. 20251
2. 202612

Newest CVEs

• CVE-2026-108545

  SillyTavern 1.12.13 through 1.19.0 Pre-Authentication Denial of Service via Body Parsing

  SillyTavern · SillyTavern

  High8.2
• CVE-2026-44651

  SillyTavern: Reflected XSS vulnerability in the CORS proxy middleware

  SillyTavern · SillyTavern

  Medium6.9
• CVE-2026-44650

  SillyTavern: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

  SillyTavern · SillyTavern

  Critical9.1
• CVE-2026-44648

  SillyTavern: Existing sessions are not invalidated after password change, allowing session reuse and account takeover

  SillyTavern · SillyTavern

  High7.5
• CVE-2026-44649

  SillyTavern: Authentication Bypass via SSO Header Injection

  SillyTavern · SillyTavern

  Critical9.8
• CVE-2026-44652

  SillyTavern: SSRF vulnerability in the CORS proxy middleware

  SillyTavern · SillyTavern

  Medium6.9
• CVE-2026-46372

  SillyTavern: SSRF in SearXNG Search Proxy via Unvalidated baseUrl

  SillyTavern · SillyTavern

  High8.5
• CVE-2026-34526

  SillyTavern: Incomplete IP validation in /api/search/visit allows SSRF via localhost and IPv6

  SillyTavern · SillyTavern

  Medium5.0
• CVE-2026-34524

  SillyTavern: Path traversal in `/api/chats/export` and `/api/chats/delete` allows arbitrary file read/delete within user data root

  SillyTavern · SillyTavern

  High8.3
• CVE-2026-34523

  SillyTavern: Path traversal allows file existence oracle

  SillyTavern · SillyTavern

  Medium5.3