Kirakira-Dev

**Name of the Vulnerable Software and Affected Versions** SillyTavern versions prior to 1.18.0 **Description** An authentication bypass and account takeover issue exists when Authelia or Authentik SSO is enabled. The software accepts `Remote-User` (for Authelia) and `X-Authentik-Username` (for Authentik) HTTP headers to automatically log in users without validating that these headers originate from a trusted reverse proxy. Consequently, any network client capable of reaching the SillyTavern port directly can inject these headers to authenticate as any user, including administrators, without a password. This occurs within the `headerUserLogin()` function called during requests to the '/login' endpoint. Additionally, the '/api/users/list' endpoint is publicly accessible, allowing attackers to enumerate user handles to facilitate the attack. Over 29,200 potentially affected instances were identified via FOFA in the past year. **Recommendations** Update to version 1.18.0 or later, which introduces a configuration option to limit SSO header authorization to specific IP addresses, defaulting to loopback addresses. As a temporary workaround, set `sso.autheliaAuth` and `sso.authentikAuth` to `false` in the `config.yaml` file if SSO is not required.

Name of the Vulnerable Software and Affected Versions SillyTavern versions prior to 1.17.0 Description A path traversal vulnerability exists in the static file route handler, allowing unauthenticated users to determine the existence of files on the server's filesystem. Attackers can send percent-encoded '../' sequences (%2E%2E%2F) in requests to static file routes to check for file existence. The vulnerable code is located in the `createRouteHandler` function (`src/users.js:947–963`). The vulnerability occurs because `req.params[0]` is decoded without proper boundary checks, allowing paths like `/characters/%2E%2E%2F%2E%2E%2FUsers/kirakira` to resolve outside the intended directory. Affected routes include `/characters/*`, `/user/files/*`, `/assets/*`, `/user/images/*`, `/backgrounds/*`, and `/User%20Avatars/*`. While file contents cannot be read, the existence of files can be determined. Recommendations Update to version 1.17.0 or later.