MediumVulnerabilityLLM-specific
CVE-2026-44651: SillyTavern reflected cross-site scripting in proxy error response
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-44651
- Published
- Record updated
- Affected
- sillytavern <= 1.17.0
- Fixed in
- 1.18.0
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.4%
Summary
CVE-2026-44651 affects SillyTavern, a locally installed user interface for text generation LLMs, image generation engines, and text-to-speech models, before 1.18.0. When fetch(url) throws, the proxy error response includes the attacker-controlled req.params.url value without HTML escaping, enabling cross-site scripting (CWE-79). GitHub, Inc. assigned a CVSS 4.0 base score of 6.9 (MEDIUM), with no NVD assessment yet.
Mitigation
Fixed in 1.18.0.
Related items
- LowFBI arrests Saudi OpenAI employee who allegedly planted recording device in conference roomSimilar attack · CNBC Technology
- MediumVisual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572)Similar attack · Embrace The Red
- LowAnthropic warns self-replicating AI could spread to your smart devicesSimilar attack · BleepingComputer
- HighCVE-2026-110207: Wukong AICRM missing authorization in user and role administration APIsSimilar attack · NVD/CVE Database
- HighCVE-2026-110202: Roo Code command approval bypass via bare >& redirect prefixSimilar attack · NVD/CVE Database