A vulnerability marked as critical has been reported in SillyTavern up to 1.16.x. This affects an unknown function. This manipulation causes path traversal.

This vulnerability is tracked as CVE-2026-34523. The attack is restricted to local execution. No exploit exists.

It is suggested to upgrade the affected component.