VulnSocial

CVE-2026-44649Disclosure

LOWCVSS 9.8 · CRITICAL

Exploit discussion active in current signal (2 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. Prior to 1.18.0, SillyTavern accepts Remote-User (Authelia) and X-Authentik-Username (Authentik) HTTP headers to automatically log in users when SSO is configured. There is no validation that these headers originate from a trusted reverse proxy. Any network client that can reach the SillyTavern port directly can inject these headers and authenticate as any user, including administrators, without a password. This vulnerability is exploitable only when sso.autheliaAuth: true or sso.authentikAuth: true is set in config.yaml (both default to false). This vulnerability is fixed in 1.18.0.

Back to dashboard
2.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-290CWE-306CWE-346CWE-807

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • General: 2 classified signals
  • Peaked 1d ago at 2 mentions (2026-05-13); latest day: 2
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01122Mentions · 2026-05-13: 2Mentions · 2026-05-29: 2PoC Mentioned / Linked · 2026-05-13: 1Patch / Workaround · 2026-05-13: 1Technical Details · 2026-05-13: 205-1305-29
Signal classification2 categories
Disclosure
250.0%
General
250.0%
Referenced assets6 URLs
Classification over time
DateTotalLabels
2026-05-132
Disclosure2
2026-05-292
General2
Full discourse4 posts
  • FOFA@fofabot
    Disclosure

    ⚠️⚠️ CVE-2026-44649 (CVSS 9.8): SillyTavern auth bypass / account takeover via spoofable SSO headers (Remote-User / X-Authentik-Username) when Authelia/Authentik SSO is enabled; upgrade to 1.18.0+. 🔥PoC: https://github.com/SillyTavern/SillyTavern/security/advisories/GHSA-gxx6-h3g6-vwjh#poc 🔗FOFA Link: https://en.fofa.info/result?qbase64=YXBwPSJTaWxseVRhdmVybiI%3D 🎯29.2K+ Results are found on http://en.fofa.info in the past year. FOFA Query: app="SillyTavern" 🔖Refer: https://github.com/SillyTavern/SillyTavern/security/advisories/GHSA-gxx6-h3g6-vwjh #OSINT #FOFA #CyberSecurity #Vulnerability

    Post summary

    CVE-2026-44649 reveals a severe auth bypass in SillyTavern via spoofable SSO headers, provides a PoC link, and urges users to upgrade to version 1.18.0+.

    01002662.5K
    14.4K followersView on X
  • Technology Interpreters, Inc.@TechTranslators
    Disclosure

    Two auth-bypass bugs disclosed in the last 48 hours. Look totally different. Same bug. SillyTavern (CVE-2026-44649) and Databricks' Unity Catalog (CVE-2026-27478) both shipped a server that believed what the client said about who it was.

    Post summary

    The statement announces two newly disclosed authentication bypass bugs (CVE‑2026‑44649 & CVE‑2026‑27478) affecting SillyTavern and Databricks' Unity Catalog, noting that they trust unverified client identity claims.

    10000101
    35 followersView on X
  • Infoflowcloud@infoflowcloud
    General

    🚨*CVE* CVE-2026-44649 SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-spee… https://www.cve.org/CVERecord?id=CVE-2026-44649 ----- Traducción: CVE-2026-44649 Sil… http://infoflow.cloud`

    Post summary

    The tweet merely announces CVE-2026-44649 with a link to its CVE record, providing no further technical or exploitation details.

    0000074
    79 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-44649 SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-spee… https://www.cve.org/CVERecord?id=CVE-2026-44649

    Post summary

    The message cites a CVE record for SillyTavern with a link, but provides no additional technical, exploitation, or mitigation information.

    00000233
    57.5K followersView on X

Explore more

Back to dashboard