CVE-2026-26286: SillyTavern server-side request forgery in asset download endpoint

Summary

CVE-2026-26286 affects SillyTavern, a locally installed user interface for text generation LLMs, image generation engines, and text-to-speech models, in versions prior to 1.16.0. An authenticated user can abuse a Server-Side Request Forgery flaw in the asset download endpoint to make arbitrary HTTP requests from the server and read the full response body. This exposes internal services, cloud metadata, and private network resources.

Mitigation

Fixed in 1.16.0, which introduces a whitelist domain check for asset download requests. The whitelist can be reviewed and customized by editing the `whitelistImportDomains` array in the `config.yaml` file.

Related items

• MediumCVE-2026-121936: easyVoice server-side request forgery through openaiBaseUrl in /api/v1/ttsSimilar attack · NVD/CVE Database
• MediumCVE-2026-118628: MLflow get-artifacts server-side request forgery information disclosureSimilar attack · NVD/CVE Database
• HighCVE-2026-118625: MLflow Tracking Server privilege escalation via get_endpointsSimilar attack · NVD/CVE Database
• InfoWhen trust becomes the payload: Inside the threats, etc quarterly reportSimilar attack · Elastic Security Labs
• MediumCritical Langflow flaws enable authentication bypass and RCESimilar attack · CSO Online