CVE-2026-44652 Details
Description
SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. Prior to 1.18.0, corsProxyMiddleware forwards req.params.url directly into fetch(url, ...). It only blocks circular requests to its own host and does not enforce destination allowlist or private/loopback restrictions, enabling SSRF. This vulnerability is fixed in 1.18.0.
A server-side request forgery (SSRF) vulnerability has been identified in SillyTavern versions through 1.17.0. The issue arises in the CORS proxy middleware, which forwards user-controlled URL parameters directly to the fetch function. This implementation only prevents circular requests to the host and fails to enforce a destination allowlist or restrict private and loopback addresses, thereby enabling SSRF. The vulnerability allows attackers to access internal network services or metadata endpoints and exfiltrate sensitive information.
Users are advised to update to SillyTavern version 1.18.0 or later, where this vulnerability has been patched. For instances hosted over a network, it is strongly recommended to enable and properly configure the server-side request filter for private address whitelisting, as suggested by a console warning and the official security checklist for administrators.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed May 29, 2026CISA-ADP
Assessed May 29, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/SillyTavern/SillyTavern/security/advisories/GHSA-ccfq-2454-f5xw | [email protected] | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-918 | Server-Side Request Forgery (SSRF) | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| SillyTavern | <= 1.17.0 (semver) |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 22, 2026 | CVE Translated | [email protected] |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 29, 2026 | New CVE Received | [email protected] |