Read the docs

SillyTavern

Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

SillyTavern records in CISA KEV

No SillyTavern vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

13 records

Priority HIGH 82

SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00218 Published 2026-05-29 Fixed in 1.18.0 CWE-290
Priority HIGH 76

SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models.

CVSS 3.1CRITICAL 9.7 Network No auth User interaction EPSS 0.0025 Published 2025-10-06 Fixed in 1.13.4 CWE-346
TI-2026-26773 CVE-2026-34524 · GHSA-vprr-q85p-79mf

Path traversal in SillyTavern

Priority HIGH 73

SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0058 Published 2026-04-02 Fixed in 1.17.0 CWE-22
Priority HIGH 70

SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00866 Published 2026-05-29 Fixed in 1.18.0 CWE-918
Priority HIGH 69

SillyTavern 1.12.13 through 1.19.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust resources because body-parser middleware runs before authentication and whitelist chec…

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00577 Published 2026-10-10 No fix listed CWE-400
Priority MEDIUM 63

SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00467 Published 2026-04-02 Fixed in 1.17.0 CWE-22
Priority LOW 37

SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00375 Published 2026-05-29 Fixed in 1.18.0 CWE-918
Priority LOW 36

SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00323 Published 2026-05-29 Fixed in 1.18.0 CWE-79
Open these records in search →