CVE-2026-34524 SillyTavern: Path Traversal in `/api/chats/export` and `/api/chats/delete` allows arbitrary file read/delete within user data root

High 8.3 Published 2 Apr 2026 Updated 3 Apr 2026

An authenticated attacker can read or delete arbitrary files within the user data root via path traversal in chat export and delete endpoints.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2026-34524?

CVE-2026-34524 is a high-severity path traversal vulnerability in SillyTavern, published on 2 Apr 2026. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. Prior to version 1.17.0, a path traversal vulnerability in chat endpoints allows an authenticated attacker to read and delete arbitrary files under their user data root (for example secrets.json and settings.json) by supplying avatar_url="..". This issue has been patched in version 1.17.0.

Weakness: CWE-22

Which versions are affected by CVE-2026-34524?

2 open source packages ship an affected version, including sillytavern. It affects 1 product.

Package	Affected	Fixed in
`sillytavern` npm	All versions	`1.17.0`
`sillytavern` npm	All versions	`1.17.0`

Products include Sillytavern Sillytavern.

How do I fix CVE-2026-34524?

Upgrade sillytavern to 1.17.0 or later.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2026-34524 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-34524 exists.

Sources

Also known as GHSA-vprr-q85p-79mf.