PT-2026-20938 · Unknown · Sillytavern

Q1Uf3Ng · Published 2026-02-19 · Updated 2026-03-25 · CVE-2026-26286

Positive Technologies · (AI Summary)

CVSS v3.1

8.5

High

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions SillyTavern versions prior to 1.16.0

Description SillyTavern is a locally installed user interface for interacting with large language models, image generation engines, and text-to-speech voice models. A Server-Side Request Forgery (SSRF) exists in the asset download endpoint for versions prior to 1.16.0. This allows authenticated users to make arbitrary HTTP requests from the server and read the full response body, potentially exposing internal services, cloud metadata, and private network resources. The issue is addressed by a whitelist domain check for asset download requests introduced in version 1.16.0, configurable via the whitelistImportDomains array in the config.yaml file.

Recommendations Upgrade to SillyTavern version 1.16.0 or later. Review and customize the whitelistImportDomains array in the config.yaml file to ensure appropriate domain restrictions.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-26286

GHSA-CCCP-94VG-J92R

Affected Products

Sillytavern

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/26xxx/CVE-2026-26286.json · Exploit
• https://github.com/SillyTavern/SillyTavern/security/advisories/GHSA-cccp-94vg-j92r · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-26286 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-26286 · Security Note
• https://t.me/CVEtracker/45176 · Telegram Post
• https://twitter.com/q1uf3ng/status/2036824777642655889 · Twitter Post