SillyTavern, a locally installed UI for interacting with AI models, contains a critical vulnerability in versions prior to 1.18.0. The POST /api/extensions/delete endpoint accepts extensionName parameter with value '.' which bypasses filename validation. This allows attackers to recursively delete the entire user extensions directory. No authentication is required in default configuration, making exploitation trivial. The vulnerability has been fixed in version 1.18.0.