A vulnerability was found in SillyTavern 1.13.4/1.16.0 and classified as critical. This issue affects some unknown processing of the file /api/search/visit of the component localhost/IPv6. Executing a manipulation can lead to server-side request forgery.
This vulnerability is registered as CVE-2026-34526. It is possible to launch the attack remotely. No exploit is available.
It is suggested to upgrade the affected component.
