{"data":{"id":"4b734c08-d966-412c-af88-f16a1d8fc1dd","title":"CVE-2025-59159: SillyTavern is a locally installed user interface that allows users to interact with text generation large language…","summary":"SillyTavern, a locally installed user interface for LLMs, image generation and text-to-speech models, has a DNS rebinding flaw in its web UI in versions prior to 1.13.4. Attackers can exploit it to install malicious extensions, read chats, and inject arbitrary HTML for phishing.","solution":"Fixed in 1.13.4, which adds a host name validation setting, `hostWhitelist.enabled` in config.yaml or the `SILLYTAVERN_HOSTWHITELIST_ENABLED` environment variable. The setting is disabled by default, so users should review their server configurations and apply the necessary changes, especially if hosting over the local network without SSL.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-59159","publishedAt":"2025-10-06T16:15:34.377Z","cveId":"CVE-2025-59159","cweIds":["CWE-346","CWE-940"],"cvssScore":"9.6","cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["sillytavern@< 1.13.4 (fixed: 1.13.4)"],"affectedPackageNames":["sillytavern"],"affectedPackageRefs":["npm:sillytavern"],"affectedVendors":[],"affectedVendorsRaw":["SillyTavern"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"SillyTavern web user interface DNS rebinding","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.0025,"epssCheckedAt":"2026-11-04T06:10:14.546Z","kevDateAdded":null,"advisoryAliases":["GHSA-7cxj-w27x-x78q"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:52:23.962Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2025-09-13T20:10:42.735Z","daysToFix":-23,"fixCheckedAt":"2026-10-29T21:43:31.359Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"sillytavern","fixedVersion":"1.13.4","matchedVersion":"1.13.4","fixReleasedAt":"2025-09-13T20:10:42.735Z","daysToFix":-23,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:43:31.208Z"}]}}