Cross-Site Scripting Vulnerability in FFXIV Teamcraft by FFXIV Teamcraft
CVE-2026-116229

5.1MEDIUM

Key Information:

Vendor: Ffxiv-teamcraft
Status: Ffxiv Teamcraft
Vendor: CVE Published:; 26 October 2026

🔔 Create Ffxiv-teamcraft Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-116229?

A vulnerability has been identified in FFXIV Teamcraft in versions up to 11.4.31 due to improper handling within the clipboard.readText function found in apps/electron/src/preload.ts. This issue allows attackers to exploit cross-site scripting, which can be executed remotely. The risk stemming from this vulnerability has been made publicly known, and it is essential for users to upgrade to version 11.4.32 to mitigate potential threats. The corresponding patch addressing this vulnerability is identified by the commit hash def118fdf36f8f3b615966893a132dd81d9cc3dc.

Affected Version(s)

FFXIV Teamcraft 11.4.0

FFXIV Teamcraft 11.4.1

FFXIV Teamcraft 11.4.2

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-116229 - Proof of Concept