PT-2026-40546 · Sillytavern+1 · Sillytavern

Greg-Kim + 3 · Published 2026-05-12 · Updated 2026-05-29 · CVE-2026-44650

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions SillyTavern versions prior to 1.18.0

Description An issue exists in the "/api/extensions/delete" endpoint where it accepts the value "." for the extensionName variable. This bypasses the sanitize-filename validation, which converts the dot to an empty string, causing the application to resolve the path to the base extensions directory. Consequently, the entire user extensions directory is recursively deleted. In the default configuration, no authentication is required to perform this action. Similar behavior is also present in the "/api/extensions/update", "/api/extensions/version", "/api/extensions/branches", and "/api/extensions/switch" endpoints.

Recommendations Update to version 1.18.0. As a temporary workaround, restrict network access to the SillyTavern instance to prevent unauthorized requests to the affected API endpoints.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-44650

GHSA-886Q-F44J-H6WH

Affected Products

Sillytavern

References · 7

• 🔥 https://github.com/SillyTavern/SillyTavern/security/advisories/GHSA-886q-f44j-h6wh · Exploit
• https://osv.dev/vulnerability/GHSA-886q-f44j-h6wh · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-44650 · Security Note
• https://github.com/SillyTavern/SillyTavern · Note
• https://github.com/SillyTavern/SillyTavern/releases/tag/1.18.0 · Note
• https://twitter.com/CVEnew/status/2060470699655880722 · Twitter Post
• https://twitter.com/infoflowcloud/status/2060471535316472053 · Twitter Post