PT-2026-29662 · Unknown · Sillytavern

Maru1009 · Published 2026-04-01 · Updated 2026-04-03 · CVE-2026-34524

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SillyTavern versions prior to 1.17.0

Description A path traversal vulnerability exists in the chat endpoints of SillyTavern. An authenticated attacker can read and delete arbitrary files under their user data root, such as secrets.json and settings.json, by manipulating the avatar url parameter with a value of "..". The input validator for avatar url inadequately blocks traversal segments like .., allowing the construction of malicious file paths. The vulnerable endpoints include the export and delete paths. This allows direct access to files outside the intended chats directory. Successful exploitation can lead to the exposure of sensitive user data and the deletion of critical files, potentially disrupting account operation.

Recommendations Update to SillyTavern version 1.17.0 or later.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-34524

GHSA-VPRR-Q85P-79MF

Affected Products

Sillytavern

References · 6

• 🔥 https://github.com/SillyTavern/SillyTavern/security/advisories/GHSA-vprr-q85p-79mf · Exploit
• https://osv.dev/vulnerability/GHSA-vprr-q85p-79mf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34524 · Security Note
• https://github.com/SillyTavern/SillyTavern · Note
• https://github.com/SillyTavern/SillyTavern/releases/tag/1.17.0 · Note
• https://twitter.com/TheHackerWire/status/2039961279075655708 · Twitter Post