Executive brief
SillyTavern is a locally installed interface used to interact with AI models for text and image generation. A security flaw allows logged-in users to save files to unauthorized locations on the host computer's hard drive by manipulating character names during a chat import. This could allow an attacker to disrupt the system or place malicious files in sensitive folders, potentially compromising the stability and integrity of the host machine.
Technical details
A path traversal vulnerability exists in the `/api/chats/import` endpoint of SillyTavern due to insufficient sanitization of the `character_name` parameter. The application uses this parameter to construct a destination file path via `path.join()` without neutralizing directory traversal sequences (e.g., `../`). An authenticated attacker can exploit this by submitting a crafted import request with a manipulated `character_name` to write arbitrary JSONL files to any location writable by the service account. This vulnerability is tracked as CVE-2026-34522 and was addressed in version 1.17.0 by implementing proper input sanitization.
Affected products
- SillyTavern SillyTavern < 1.17.0
Timeline
- 2026-03-28: patched: Version 1.17.0 released
- 2026-03-30: advisory: GitHub Security Advisory published
- 2026-04-02: disclosed: CVE published to NVD