https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 13:39:27 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-280044 EUVD-2026-280044 https://cve.radiocsirt.org/vuln/euvd-2026-280044 https://cve.radiocsirt.org/vuln/fkie_cve-2026-34522 <p>SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. Prior to version 1.17.0, a path traversal vulnerability in /api/chats/import allows an authenticated attacker to write attacker-controlled files outside the intended chats directory by injecting traversal sequences into character_name. This issue has been patched in version 1.17.0.</p> <p>SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. Prior to version 1.17.0, a path traversal vulnerability in /api/chats/import allows an authenticated attacker to write attacker-controlled files outside the intended chats directory by injecting traversal sequences into character_name. This issue has been patched in version 1.17.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-34522 https://cve.radiocsirt.org/vuln/ghsa-xvww-xhx6-22pf <p><strong>Affected:</strong> npm: sillytavern</p> <p>### Summary A path traversal vulnerability in `/api/chats/import` allows an authenticated attacker to write attacker-controlled files outside the intended chats directory by injecting traversal sequences into `character_name`.</p> <p>### Details `character_name` is used unsafely as part of the destination filename and then passed into `path.join(...)` without sanitization.</p> <p>Evidence: - Import handler entrypoint: &lt;https://github.com/SillyTavern/SillyTavern/blob/b7bb8be35a5c779b4db12a4a5b94d7e49096071c/src/endpoints/chats.js#L680-L686&gt; - Unsanitized `character_name` used in output filename: &lt;https://github.com/SillyTavern/SillyTavern/blob/b7bb8be35a5c779b4db12a4a5b94d7e49096071c/src/endpoints/chats.js#L719-L723&gt; - Same write pattern in JSONL import branch: &lt;https://github.com/SillyTavern/SillyTavern/blob/b7bb8be35a5c779b4db12a4a5b94d7e49096071c/src/endpoints/chats.js#L759-L766&gt; - Endpoint auth context (authenticated user access): &lt;https://github.com/SillyTavern/SillyTavern/blob/b7bb8be35a5c779b4db12a4a5b94d7e49096071c/src/server-main.js#L239&gt;</p> <p>Example payload: - `character_name=../../../../tmp/st_poc`</p> <p>This causes the final destination path to escape from `&lt;user&gt;/chats/&lt;avatar&gt;/...` and write to an attacker-controlled location such as `/tmp/...` (or any writable path for the service account).</p> <p>### PoC Prerequisites: - Valid authenticated session cookie (`cookie.txt`) - Valid CSRF token (`$TOKEN`)</p> <p>Prepare payload:</p> <p>```bash printf &#39;{&#34;user_name&#34;:&#34;u&#34;,&#34;chat_metadata&#34;:{}}…</p> <p><strong>Affected:</strong> npm: sillytavern</p> <p>### Summary A path traversal vulnerability in `/api/chats/import` allows an authenticated attacker to write attacker-controlled files outside the intended chats directory by injecting traversal sequences into `character_name`.</p> <p>### Details `character_name` is used unsafely as part of the destination filename and then passed into `path.join(...)` without sanitization.</p> <p>Evidence: - Import handler entrypoint: &lt;https://github.com/SillyTavern/SillyTavern/blob/b7bb8be35a5c779b4db12a4a5b94d7e49096071c/src/endpoints/chats.js#L680-L686&gt; - Unsanitized `character_name` used in output filename: &lt;https://github.com/SillyTavern/SillyTavern/blob/b7bb8be35a5c779b4db12a4a5b94d7e49096071c/src/endpoints/chats.js#L719-L723&gt; - Same write pattern in JSONL import branch: &lt;https://github.com/SillyTavern/SillyTavern/blob/b7bb8be35a5c779b4db12a4a5b94d7e49096071c/src/endpoints/chats.js#L759-L766&gt; - Endpoint auth context (authenticated user access): &lt;https://github.com/SillyTavern/SillyTavern/blob/b7bb8be35a5c779b4db12a4a5b94d7e49096071c/src/server-main.js#L239&gt;</p> <p>Example payload: - `character_name=../../../../tmp/st_poc`</p> <p>This causes the final destination path to escape from `&lt;user&gt;/chats/&lt;avatar&gt;/...` and write to an attacker-controlled location such as `/tmp/...` (or any writable path for the service account).</p> <p>### PoC Prerequisites: - Valid authenticated session cookie (`cookie.txt`) - Valid CSRF token (`$TOKEN`)</p> <p>Prepare payload:</p> <p>```bash printf &#39;{&#34;user_name&#34;:&#34;u&#34;,&#34;chat_metadata&#34;:{}}…</p> https://cve.radiocsirt.org/vuln/ghsa-xvww-xhx6-22pf