Is CVE-2025-59159 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2025-59159 being exploited in the wild.

How severe is CVE-2025-59159?

Low severity, with a CVSS score of 3.1, published 6 October 2025.

Which products and versions are affected?

sillytavern (npm) SEMVER:introduced=0,fixed=1.13.4.

Is there a fix for CVE-2025-59159?

Yes. sillytavern (npm): upgrade to 1.13.4 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2025-59159 attacked?

It is attacked over the network, in a web application.

Am I affected by CVE-2025-59159?

Check whether you run sillytavern (npm) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-59159: SillyTavern DNS rebinding vulnerability

CVE-2025-59159 · Severity: low · CVSS 3.1 · Published 2025-10-06

SillyTavern is a web-based interface for managing AI chatbots. A DNS rebinding vulnerability allows unauthenticated attackers to bypass security controls and gain remote access to a user's local SillyTavern instance simply by tricking them into visiting a malicious website. An attacker could read all user conversations, install malicious extensions, inject phishing content, or take complete control of the system.

Technologies: sillytavern (npm). Vendors: npm.

Quick answers

Is CVE-2025-59159 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2025-59159 being exploited in the wild.
How severe is CVE-2025-59159?: Low severity, with a CVSS score of 3.1, published 6 October 2025.
Which products and versions are affected?: sillytavern (npm) SEMVER:introduced=0,fixed=1.13.4.
Is there a fix for CVE-2025-59159?: Yes. sillytavern (npm): upgrade to 1.13.4 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2025-59159 attacked?: It is attacked over the network, in a web application.
Am I affected by CVE-2025-59159?: Check whether you run sillytavern (npm) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

sillytavern (npm): upgrade to 1.13.4 or later
```
npm install sillytavern@1.13.4
```

Technical details

The vulnerability is a DNS rebinding attack (CWE-346, CWE-940) that exploits insufficient origin validation in the SillyTavern web interface. The web UI does not properly verify the source of incoming HTTP requests, allowing an attacker to craft a malicious webpage that uses DNS rebinding techniques to redirect browser requests to localhost (127.0.0.1) after initially resolving to the attacker's IP. This bypasses CORS (Cross-Origin Resource Sharing) protections. The attack requires user interaction (visiting the malicious site) but no authentication or special privileges. Once exploited, an attacker gains full control over the victim's SillyTavern instance, including ability to read chats, modify data, and execute arbitrary actions. A patch was released in version 1.13.4 introducing optional host whitelisting validation via the hostWhitelist.enabled configuration setting.

Affected products

SillyTavern SillyTavern <1.13.4

Identifiers

CVE-2025-59159
GHSA-7cxj-w27x-x78q

Timeline

2025-10-06: disclosed
2025-10-06: patched: Version 1.13.4 with host whitelisting feature

References

https://github.com/SillyTavern/SillyTavern/security/advisories/GHSA-7cxj-w27x-x78q

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.