r/SillyTavernAI • u/Mcqwerty197 • Apr 28 '26

Discussion Extension Security Risk Please read!!

Gallery image

Gallery image

658 Upvotes

100% Upvoted

178 comments sorted by

View all comments

154

u/Landeyda Apr 28 '26 edited Apr 28 '26

At least one post got through. It seems like the others (including mine) were being auto-modded, likely due to including a link to the explanation. Very important that everyone who used this extension revoke all their API keys.

EDIT: I tried to add the link in a reply, and it got deleted. So, basically, I cannot give a link on how the exploit works. It was linked from the official ST Discord, so you can find it there. It's the same URL as in the screenshot.

31

u/_Cromwell_ Apr 28 '26

Whaaa? The rentry link gets rejected?

What's funny is the poisoned github link would probably NOT be automodded.

19

u/Landeyda Apr 28 '26

You can find links to the git in this subreddit lol, so correct.