TI-2026-70544 Aliases CVE-2026-108545 GHSA-g54j-r2jq-rm6q

Pre-authentication denial of service in SillyTavern via body parsing

HIGH 69CWE-400Published 2026-10-10 · Updated 2026-10-14

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: High
Attack requirements: Present
Impact type: Denial of service
Confidentiality · integrity · availability: None · None · High
Fix status: No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-400.

Summary

SillyTavern from 1.12.13 through 1.19.0 runs its body-parser middleware before authentication and whitelist checks, which leads to uncontrolled resource consumption (CWE-400). An unauthenticated remote attacker can send large or compressed JSON or urlencoded bodies up to 500 MB, optionally in parallel, to exhaust memory and CPU. An exploit link is listed in the references.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Description from the CNA

SillyTavern 1.12.13 through 1.19.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust resources because body-parser middleware runs before authentication and whitelist checks. Attackers can send large or compressed JSON or urlencoded bodies up to 500 MB, optionally in parallel, to exhaust memory and CPU and deny service.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00577 47th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by the CNA

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
SillyTavern	SillyTavern	1.12.13 – 1.19.0	—	No fix listed	CNA

SillyTavern VendorSillyTavern Affected 1.12.13 – 1.19.0 Fixed in — No fix listed CNA

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPE	Versions	Role	Vendor
cpe:2.3:a:sillytavern:sillytavern::::::::	—	—	SillyTavern

cpe:2.3:a:sillytavern:sillytavern:*:*:*:*:*:*:*:* Versions — — ·SillyTavern

Remediation

The sources list no fixed version for SillyTavern.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Timeline

2026-10-11 Threatist record created from CVE-2026-108545
2026-10-11 Alias added: GHSA-g54j-r2jq-rm6q
2026-10-11 Priority changed: MEDIUM → LOW
2026-10-14 CISA SSVC decision points changed
2026-10-14 Priority changed: LOW → HIGH

References

Exploit 1

https://hackmd.io/@haind/sillytavern-preauth-body-parser-dos

Other 2

TI-2026-32549 SillyTavern: Authentication Bypass via SSO Header Injection CVSS 3.1CRITICAL 9.8
TI-2026-32550 SillyTavern: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVSS 3.1CRITICAL 9.1
TI-2025-36763 SillyTavern Web Interface Vulnerable to DNS Rebinding CVSS 3.1CRITICAL 9.7
TI-2026-26773 Path traversal in SillyTavern CVSS 3.1HIGH 8.8
TI-2026-34089 SillyTavern: SSRF in SearXNG Search Proxy via Unvalidated baseUrl CVSS 3.1HIGH 8.5
TI-2026-32548 SillyTavern: Existing sessions are not invalidated after password change, allowing session reuse and account takeover CVSS 3.1HIGH 7.5

See all 12 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences