CVE-2026-44648
High · 7.5CVSS
7.5
EPSS
0.4%
Published
May 29, 2026
CISA due date
—
The record
SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. Prior to 1.18.0, SillyTavern relies on cookie-session for authentication, storing all session data (user handle, permissions) in a signed cookie. The endpoints POST /api/users/change-password and POST /api/users/recover-step2 only update the password hash in the database but do not expire current sessions. Because the session is stateless and stored entirely in the client cookie, there is no server-side mechanism to revoke a token once issued. This vulnerability is fixed in 1.18.0.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | sillytavern | 0 | 1.18.0 |
Related vulnerabilities
- GHSA-wmm3-h9qj-p5v6 SillyTavern: Existing sessions are not invalidated after password change, allowing… Same vulnerability
- CVE-2026-44652 SillyTavern is a locally installed user interface that allows users to interact with text… Also affects sillytavern
- CVE-2026-46372 SillyTavern is a locally installed user interface that allows users to interact with text… Also affects sillytavern
- CVE-2026-44649 SillyTavern is a locally installed user interface that allows users to interact with text… Also affects sillytavern
- CVE-2026-44650 SillyTavern is a locally installed user interface that allows users to interact with text… Also affects sillytavern
- CVE-2026-44651 SillyTavern is a locally installed user interface that allows users to interact with text… Also affects sillytavern
- GHSA-qg89-qwwh-5f3j SillyTavern: SSRF in SearXNG Search Proxy via Unvalidated baseUrl Also affects sillytavern
- GHSA-ccfq-2454-f5xw SillyTavern has a SSRF vulnerability in the CORS proxy middleware Also affects sillytavern