CVE-2026-46372 Details
Description
SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. Prior to 1.18.0, SillyTavern exposes /api/search/searxng, which accepts attacker-controlled baseUrl and uses it directly to build outbound server-side fetches. An authenticated low-privilege user can point baseUrl at an internal or loopback HTTP service and receive the /search response body. This vulnerability is fixed in 1.18.0.
A server-side request forgery (SSRF) vulnerability has been identified in SillyTavern versions prior to 1.18.0. The issue arises in the SearXNG search proxy API, which accepts a baseUrl parameter controlled by the attacker. This parameter is used to make outbound fetch requests without proper validation. An authenticated low-privilege user can exploit this by directing the baseUrl to an internal or loopback HTTP service and retrieving the response from the /search endpoint.
Users are advised to update SillyTavern to version 1.18.0 or later, and to enable and configure the private request whitelisting feature when hosting the application over a network. Consult the SillyTavern security checklist for guidance.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed May 29, 2026CISA-ADP
Assessed May 29, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/SillyTavern/SillyTavern/security/advisories/GHSA-qg89-qwwh-5f3j | CISA-ADP | AdvisoryExploitRemedyVendor |
| https://github.com/SillyTavern/SillyTavern/security/advisories/GHSA-qg89-qwwh-5f3j | [email protected] | AdvisoryExploitRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-918 | Server-Side Request Forgery (SSRF) | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| SillyTavern | <= 1.17.0 (semver) |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 22, 2026 | CVE Translated | [email protected] |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 29, 2026 | CVE Modified | CISA-ADP |
| May 29, 2026 | New CVE Received | [email protected] |