What’s Vulnerable › Vulnerabilities
CVE-2026-26286: SillyTavern has Server-Side Request Forgery (SSRF) via Asset Download Endpoint that Allows Reading Internal Services
- Severity: high (CVSS 8.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2026-02-19 · updated 2026-06-17
- Weakness: CWE-918
Description
SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. In versions prior to 1.16.0, a Server-Side Request Forgery (SSRF) vulnerability in the asset download endpoint allows authenticated users to make arbitrary HTTP requests from the server and read the full response body, enabling access to internal services, cloud metadata, and private network resources. The vulnerability has been patched in the version 1.16.0 by introducing a whitelist domain check for asset download requests. It can be reviewed and customized by editing the `whitelistImportDomains` array in the `config.yaml` file.
Affected products
- SillyTavern: before 1.16.0 — fixed in 1.16.0
How to fix
Upgrade to a fixed version: SillyTavern 1.16.0. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2026-26286 or the next vulnerability affects your stack