SillyTavern up to 1.13.3 Web User Interface SILLYTAVERN_HOSTWHITELIST_ENABLED origin validation

Summaryinfo

A vulnerability classified as critical was found in SillyTavern up to 1.13.3. This impacts an unknown function of the component Web User Interface. Executing a manipulation of the argument SILLYTAVERN_HOSTWHITELIST_ENABLED can lead to origin validation. This vulnerability is tracked as CVE-2025-59159. The attack can be launched remotely. No exploit exists. Upgrading the affected component is advised.

Detailsinfo

A vulnerability was found in SillyTavern up to 1.13.3. It has been declared as critical. This vulnerability affects an unknown function of the component Web User Interface. The manipulation of the argument SILLYTAVERN_HOSTWHITELIST_ENABLED with an unknown input leads to a origin validation vulnerability. The CWE definition for the vulnerability is CWE-346. The product does not properly verify that the source of data or communication is valid. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. In versions prior to 1.13.4, the web user interface for SillyTavern is susceptible to DNS rebinding, allowing attackers to perform actions like install malicious extensions, read chats, inject arbitrary HTML for phishing attacks, etc. The vulnerability has been patched in the version 1.13.4 by introducing a server configuration setting that enables a validation of host names in inbound HTTP requests according to the provided list of allowed hosts: `hostWhitelist.enabled` in config.yaml file or `SILLYTAVERN_HOSTWHITELIST_ENABLED` environment variable. While the setting is disabled by default to honor a wide variety of existing user configurations and maintain backwards compatibility, existing and new users are encouraged to review their server configurations and apply necessary changes to their setup, especially if hosting over the local network while not using SSL.

The advisory is shared for download at github.com. This vulnerability was named CVE-2025-59159 since 09/09/2025. The exploitation appears to be easy. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. Successful exploitation requires user interaction by the victim. There are known technical details, but no exploit is available.

Upgrading to version 1.13.4 eliminates this vulnerability. The upgrade is hosted for download at github.com. Applying the patch d134abd50e4a416e3b81233242583b0a23f38320 is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Name

• SillyTavern

Version

• 1.13.0
• 1.13.1
• 1.13.2
• 1.13.3

License

• open-source

Website

• Product: https://github.com/SillyTavern/SillyTavern/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion