SillyTavern: Malicious Users Can Access Internal Services

Summary

A security issue in SillyTavern versions prior to 1.16.0 allows malicious users to access internal services, cloud metadata, and private network resources by making unauthorized requests. This is a risk because it could allow hackers to access sensitive information. To fix this issue, update to version 1.16.0 and review the `whitelistImportDomains` array in the `config.yaml` file to ensure only trusted domains are allowed to make requests.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions	Fix available
sillytavern	sillytavern	<= 1.16.0	–

Original title

SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. In versions pr...

Original description

SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. In versions prior to 1.16.0, a Server-Side Request Forgery (SSRF) vulnerability in the asset download endpoint allows authenticated users to make arbitrary HTTP requests from the server and read the full response body, enabling access to internal services, cloud metadata, and private network resources. The vulnerability has been patched in the version 1.16.0 by introducing a whitelist domain check for asset download requests. It can be reviewed and customized by editing the `whitelistImportDomains` array in the `config.yaml` file.

nvd CVSS3.1 8.5

nvd CVSS4.0 7.1

Vulnerability type

CWE-918 Server-Side Request Forgery (SSRF)

https://github.com/SillyTavern/SillyTavern/security/advisories/GHSA-cccp-94vg-j9... Exploit Vendor Advisory