CVE-2026-34522

HighCVSS 8.1/10Last modified Jul 24, 2026

Description

SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. Prior to version 1.17.0, a path traversal vulnerability in /api/chats/import allows an authenticated attacker to write attacker-controlled files outside the intended chats directory by injecting traversal sequences into character_name. This issue has been patched in version 1.17.0.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-22 CWE-73

Affected software

Vendor	Product	Versions
SillyTavern	SillyTavern	< 1.17.0

References

https://github.com/SillyTavern/SillyTavern/releases/tag/1.17.0Release Notes
https://github.com/SillyTavern/SillyTavern/security/advisories/GHSA-xvww-xhx6-22pfExploit, Vendor Advisory

Timeline

Published: Apr 2, 2026
Last modified: Jul 24, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-345235.3SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation CVE-2026-345248.8SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation CVE-2026-345255.3AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, multiple Host headers were allowed CVE-2026-345265.0SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation CVE-2026-345275.3Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, SbieIniServer::HashPassword c CVE-2026-345289.8File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Pri CVE-2026-345299.0File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Pri CVE-2026-34538.1The ProfilePress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.16.11. This CVE-2026-345306.9File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Pri CVE-2026-345318.2Flask-HTTPAuth provides Basic, Digest and Token HTTP authentication for Flask routes. Prior to version 4.8.1, in a situation where the clien CVE-2026-345329.1Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.67 and 9.7.0-a CVE-2026-345335.5iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile