CVE-2026-34522

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

CVE-2026-34522 is a path traversal vulnerability (CWE-22, CWE-73) affecting SillyTavern, a locally installed user interface for interacting with text generation large language models, image generation engines, and text-to-speech voice models. The issue resides in the /api/chats/import endpoint prior to version 1.17.0, where an attacker can inject traversal sequences into the character_name parameter to write attacker-controlled files outside the intended chats directory. The vulnerability carries a CVSS v3.1 base score of 8.1 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H), indicating high severity due to its potential for significant integrity and availability impacts.

An authenticated attacker with low privileges can exploit this vulnerability remotely over the network with low complexity and no user interaction required. By crafting a malicious request to the import endpoint, the attacker can place arbitrary files in unintended locations on the filesystem, potentially overwriting critical configuration files, scripts, or other system resources, leading to unauthorized modifications (high integrity impact) or service disruption (high availability impact).

The SillyTavern security advisory (GHSA-xvww-xhx6-22pf) and release notes for version 1.17.0 confirm that the vulnerability has been patched by addressing the path traversal in the import functionality. Security practitioners should upgrade to version 1.17.0 or later to mitigate the issue.

SillyTavern's role in facilitating local interactions with AI/ML models like LLMs for text generation underscores its relevance in AI development environments, where filesystem access controls are critical to prevent supply chain compromises. No public reports of real-world exploitation are available as of the CVE publication on 2026-04-02.