Code Injection Vulnerability in TidGi-Desktop by tiddly-gittly
CVE-2026-14722

6.9MEDIUM

Key Information:

Vendor: Tiddly-gittly
Status: Tidgi-desktop
Vendor: CVE Published:; 5 July 2026

🔔 Create Tiddly-gittly Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-14722?

A vulnerability in TidGi-Desktop, specifically within the Git Repository Import component, allows for code injection via an unknown function in the file src/services/wiki/wikiWorker/loadWikiTiddlersWithSubWikis.ts. Attackers can exploit this vulnerability remotely, potentially compromising the software's integrity. The exploit has become public knowledge, increasing the risk for affected users. It is crucial for users to be aware of this vulnerability and apply necessary security measures.

Affected Version(s)

TidGi-Desktop 0.1

TidGi-Desktop 0.2

TidGi-Desktop 0.3

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-14722 - Proof of Concept