CVE-2026-34522

Name of the Vulnerable Software and Affected Versions SillyTavern versions prior to 1.17.0

Description A path traversal vulnerability exists in the /api/chats/import API endpoint. An authenticated attacker can write files to locations outside the intended chats directory by injecting traversal sequences into the character name parameter. The character name parameter is used without proper sanitization when constructing the destination filename. This allows an attacker to escape the intended directory structure and write files to arbitrary locations, such as /tmp/..., potentially leading to integrity and availability issues.

Recommendations Upgrade to SillyTavern version 1.17.0 or later.