Vulnerability Description
SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. In versions prior to 1.16.0, a Server-Side Request Forgery (SSRF) vulnerability in the asset download endpoint allows authenticated users to make arbitrary HTTP requests from the server and read the full response body, enabling access to internal services, cloud metadata, and private network resources. The vulnerability has been patched in the version 1.16.0 by introducing a whitelist domain check for asset download requests. It can be reviewed and customized by editing the `whitelistImportDomains` array in the `config.yaml` file.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sillytavern | Sillytavern | < 1.16.0 |
Related Weaknesses (CWE)
References
- https://github.com/SillyTavern/SillyTavern/security/advisories/GHSA-cccp-94vg-j9ExploitVendor Advisory
FAQ
What is CVE-2026-26286?
CVE-2026-26286 is a vulnerability with a CVSS score of 8.5 (HIGH). SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. In versions prior...
How severe is CVE-2026-26286?
CVE-2026-26286 has been rated HIGH with a CVSS base score of 8.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-26286?
Check the references section above for vendor advisories and patch information. Affected products include: Sillytavern Sillytavern.