Skip to content
OpenAdvisories

Vendor

SillyTavern

13 known vulnerabilities.

Products

SillyTavern 13
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-44648 Public exploit

    SillyTavern: Existing sessions are not invalidated after password change, allowing session reuse and account takeover

    SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. Prior to 1.18.0, SillyTavern relies on cookie-session for authentication, st…

    SillyTavern SillyTavern sillytavern npm