CVE-2026-34522

🗓️ 02 Apr 2026 17:13:44Reported by GitHub_MType

cve🔗 web.nvd.nist.gov👁 2 Views🌐 WEB

CVE-2026-34522: Path traversal in SillyTavern allows authenticated file writes outside chats; fixed in 1.17.0.

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2026-34522	2 Apr 202617:13	–	attackerkb
Circl	CVE-2026-34522	30 Mar 202617:36	–	circl
CNNVD	SillyTavern 安全漏洞	2 Apr 202600:00	–	cnnvd
Cvelist	CVE-2026-34522 SillyTavern: Path traversal in `/api/chats/import` allows arbitrary file write outside intended chat directory	2 Apr 202617:13	–	cvelist
Github Security Blog	SillyTavern has a path traversal in `/api/chats/import` allows arbitrary file write outside intended chat directory	1 Apr 202621:36	–	github
NVD	CVE-2026-34522	2 Apr 202618:16	–	nvd
OSV	GHSA-XVWW-XHX6-22PF SillyTavern has a path traversal in `/api/chats/import` allows arbitrary file write outside intended chat directory	1 Apr 202621:36	–	osv
Positive Technologies	PT-2026-29660	1 Apr 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-34522	3 Apr 202623:01	–	redhatcve
Snyk	External Control of File Name or Path	1 Apr 202621:36	–	snyk

NVD

Vulners

Node

sillytavern sillytavernRange<1.17.0node.js

[
  {
    "vendor": "SillyTavern",
    "product": "SillyTavern",
    "versions": [
      {
        "version": "< 1.17.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/SillyTavern/SillyTavern/security/advisories/GHSA-xvww-xhx6-22pf
github	www.github.com/SillyTavern/SillyTavern/releases/tag/1.17.0

Parameter	Position	Path	Description	CWE
character_name	request body	/api/chats/import	Path traversal vulnerability in /api/chats/import allowing attacker-controlled file writes outside chats directory via traversal sequences in character_name.	CWE-22, CWE-73

13 Apr 2026 18:34Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.18.1

EPSS0.00075

SSVC