A Server-Side Request Forgery vulnerability in SillyTavern allows authenticated users to access sensitive internal services and cloud metadata, posing a significant risk to local infrastructure.

This is a Server-Side Request Forgery (CWE-918) vulnerability located in the asset download endpoint. An authenticated attacker can force the server to perform arbitrary HTTP requests and read the full response body, effectively bypassing network perimeters.

The ability to perform SSRF can lead to the exposure of internal services, cloud environment metadata, and private network resources that are not intended for public access. With a CVSS score of 8.5, this high-severity vulnerability represents a significant risk of internal data leakage and potential lateral movement within the hosting environment.

Immediate Action: Update SillyTavern to version 1.16.0 or later to implement the required domain whitelist check for asset download requests.

Proactive Monitoring: Monitor server access logs for anomalous outbound HTTP requests originating from the SillyTavern application to internal service endpoints or cloud metadata services (e.g., 169.254.169.254).

Compensating Controls: If an immediate update is not feasible, restrict the application server's network access to internal resources via egress firewall rules and configure the whitelistImportDomains array in the config.yaml file to enforce strict domain validation.

Public Exploit Available: Unknown.

Given the high CVSS severity and the potential for unauthorized access to internal network resources, organizations should prioritize upgrading to version 1.16.0 immediately. Ensuring that the whitelistImportDomains configuration is strictly enforced provides an essential layer of defense against potential exploitation of this SSRF flaw.