CVE-2026-44649

SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. Prior to 1.18.0, SillyTavern accepts Remote-User (Authelia) and X-Authentik-Username (Authentik) HTTP headers to automatically log in users when SSO is configured. There is no validation that these headers originate from a trusted reverse proxy. Any network client that can reach the SillyTavern port directly can inject these headers and authenticate as any user, including administrators, without a password. This vulnerability is exploitable only when sso.autheliaAuth: true or sso.authentikAuth: true is set in config.yaml (both default to false). This vulnerability is fixed in 1.18.0.

• CWE-290
• CWE-306
• CWE-346
• CWE-807

• https://github.com/SillyTavern/SillyTavern/security/advisories/GHSA-gxx6-h3g6-vwjh
• https://github.com/SillyTavern/SillyTavern/security/advisories/GHSA-gxx6-h3g6-vwjh

Published

May 29, 2026

Last Modified

Jul 22, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-44643Angular Expressions provides expressions for the Angular.JS …10
• CVE-2026-44644LiquidJS is a Shopify/GitHub Pages compatible template engin…6.1
• CVE-2026-44645LiquidJS is a Shopify/GitHub Pages compatible template engin…6.5
• CVE-2026-44646LiquidJS is a Shopify/GitHub Pages compatible template engin…5.3
• CVE-2026-44647OneDev is a Git server with CI/CD, kanban, and packages. Pri…7.1
• CVE-2026-44648SillyTavern is a locally installed user interface that allow…7.5
• CVE-2026-4465A flaw has been found in D-Link DIR-513 1.10. The impacted e…8.8
• CVE-2026-44650SillyTavern is a locally installed user interface that allow…9.1
• CVE-2026-44651SillyTavern is a locally installed user interface that allow…6.9
• CVE-2026-44652SillyTavern is a locally installed user interface that allow…6.9
• CVE-2026-44653LibreChat is an enhanced ChatGPT clone that supports multipl…6.5
• CVE-2026-44654LibreChat is an enhanced ChatGPT clone that supports multipl…8.1