CVE-2026-46372: SillyTavern: SSRF in SearXNG Search Proxy via Unvalidated baseUrl

May 19, 2026 (updated June 9, 2026)

SillyTavern 1.17.0 exposes /api/search/searxng, which accepts attacker-controlled baseUrl and uses it directly to build outbound server-side fetches. An authenticated low-privilege user can point baseUrl at an internal or loopback HTTP service and receive the /search response body.

Confirmed version: SillyTavern 1.17.0 from the audited source tree. Broader affected versions and patched versions should be confirmed by the maintainer.

References

github.com/SillyTavern/SillyTavern/security/advisories/GHSA-qg89-qwwh-5f3j
github.com/advisories/GHSA-qg89-qwwh-5f3j
nvd.nist.gov/vuln/detail/CVE-2026-46372

Code Behaviors & Features

Detect and mitigate CVE-2026-46372 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →