CVE-2026-34523 SillyTavern: Path traversal allows file existence oracle

Medium 5.3 Published 2 Apr 2026 Updated 3 Apr 2026

Unauthenticated attackers can determine file existence on the server filesystem via path traversal in static file routes.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2026-34523?

CVE-2026-34523 is a medium-severity path traversal vulnerability in SillyTavern, published on 2 Apr 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. Prior to version 1.17.0, a path traversal vulnerability in the static file route handler allows any unauthenticated user to determine whether files exist anywhere on the server's filesystem. by sending percent-encoded "../" sequences (%2E%2E%2F) in requests to static file routes, an attacker can check for the existence of files. This issue has been patched in version 1.17.0.

Weakness: CWE-22

Which versions are affected by CVE-2026-34523?

2 open source packages ship an affected version, including sillytavern. It affects 1 product.

Package	Affected	Fixed in
`sillytavern` npm	All versions	`1.17.0`
`sillytavern` npm	All versions	`1.17.0`

Products include Sillytavern Sillytavern.

How do I fix CVE-2026-34523?

Upgrade sillytavern to 1.17.0 or later.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2026-34523 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-34523 exists.

Sources

Also known as GHSA-525j-2hrj-m8fp.