CVE-2026-34526: SillyTavern: Incomplete IP validation in /api/search/visit allows SSRF via localhost and IPv6

April 1, 2026 (updated April 6, 2026)

Server-side request forgery with partial restrictions. An authenticated user can force the server to fetch from internal hosts on default ports (80/443) using hostnames or IPv6 addresses that bypass the IP check. The full response body is returned. Lower severity than a fully unrestricted SSRF due to the port limitation.

References

github.com/SillyTavern/SillyTavern
github.com/SillyTavern/SillyTavern/releases/tag/1.17.0
github.com/SillyTavern/SillyTavern/security/advisories/GHSA-wm7j-m6jm-8797
github.com/advisories/GHSA-wm7j-m6jm-8797
nvd.nist.gov/vuln/detail/CVE-2026-34526

Code Behaviors & Features

Detect and mitigate CVE-2026-34526 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →