CriticalVulnerabilityLLM-specific
CVE-2026-44650: SillyTavern path traversal in /api/extensions/delete deletes user extensions
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-44650
- Published
- Record updated
- Affected
- sillytavern <= 1.17.0
- Fixed in
- 1.18.0
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.8%
Summary
CVE-2026-44650 affects SillyTavern, a locally installed user interface for text generation large language models, image generation engines, and text-to-speech voice models, prior to 1.18.0. The POST /api/extensions/delete endpoint accepts extensionName: ".", which bypasses sanitize-filename validation and causes the entire user extensions directory to be recursively deleted. No authentication is required in the default configuration.
Mitigation
This vulnerability is fixed in 1.18.0.
Related items
- HighCVE-2026-109331: Network-AI security control bypass in ClaudeHookBridge PreToolUse hookSimilar attack · NVD/CVE Database
- MediumCVE-2026-109296: Open WebUI missing authorization lets users reach disabled model backendsSimilar attack · NVD/CVE Database
- MediumCVE-2026-109292: Open WebUI information disclosure exposing session cookies on OAuth connectionsSimilar attack · NVD/CVE Database
- HighCVE-2026-108953: mac-shell-mcp OS command injection through execute_command argumentsSimilar attack · NVD/CVE Database
- HighCVE-2026-108836: Ollama server-side request forgery in Pull APISimilar attack · NVD/CVE Database