PT-2026-29660 · Unknown · Sillytavern

Maru1009 · Published 2026-04-01 · Updated 2026-04-03 · CVE-2026-34522

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions SillyTavern versions prior to 1.17.0

Description A path traversal vulnerability exists in the /api/chats/import API endpoint. An authenticated attacker can write files to locations outside the intended chats directory by injecting traversal sequences into the character name parameter. The character name parameter is used without proper sanitization when constructing the destination filename. This allows an attacker to escape the intended directory structure and write files to arbitrary locations, such as /tmp/..., potentially leading to integrity and availability issues.

Recommendations Upgrade to SillyTavern version 1.17.0 or later.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-73

CWE-22

Related Identifiers

CVE-2026-34522

GHSA-XVWW-XHX6-22PF

Affected Products

Sillytavern

References · 6

• 🔥 https://github.com/SillyTavern/SillyTavern/security/advisories/GHSA-xvww-xhx6-22pf · Exploit
• https://osv.dev/vulnerability/GHSA-xvww-xhx6-22pf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34522 · Security Note
• https://github.com/SillyTavern/SillyTavern · Note
• https://github.com/SillyTavern/SillyTavern/releases/tag/1.17.0 · Note
• https://twitter.com/TheHackerWire/status/2039961100511567892 · Twitter Post