CVE-2025-59159: SillyTavern web user interface DNS rebinding

Summary

SillyTavern, a locally installed user interface for LLMs, image generation and text-to-speech models, has a DNS rebinding flaw in its web UI in versions prior to 1.13.4. Attackers can exploit it to install malicious extensions, read chats, and inject arbitrary HTML for phishing.

Mitigation

Fixed in 1.13.4, which adds a host name validation setting, `hostWhitelist.enabled` in config.yaml or the `SILLYTAVERN_HOSTWHITELIST_ENABLED` environment variable. The setting is disabled by default, so users should review their server configurations and apply the necessary changes, especially if hosting over the local network without SSL.

Related items

• MediumCVE-2026-121936: easyVoice server-side request forgery through openaiBaseUrl in /api/v1/ttsSimilar attack · NVD/CVE Database
• MediumCVE-2026-118628: MLflow get-artifacts server-side request forgery information disclosureSimilar attack · NVD/CVE Database
• HighCVE-2026-118625: MLflow Tracking Server privilege escalation via get_endpointsSimilar attack · NVD/CVE Database
• InfoWhen trust becomes the payload: Inside the threats, etc quarterly reportSimilar attack · Elastic Security Labs
• MediumCritical Langflow flaws enable authentication bypass and RCESimilar attack · CSO Online