CVE-2026-14722 | A vulnerability was found in tiddly-gittly TidGi-Desktop up … | CVSS 7.3 HIGH

Description

A vulnerability was found in tiddly-gittly TidGi-Desktop up to 0.13.0. This impacts an unknown function of the file src/services/wiki/wikiWorker/loadWikiTiddlersWithSubWikis.ts of the component Git Repository Import. The manipulation results in code injection. The attack may be performed from remote. The exploit has been made public and could be used.

Metadata

CVE ID: CVE-2026-14722
State: PUBLISHED
Assigner: VulDB
Reserved: 2026-07-04 08:01 UTC
Published: 2026-07-05 07:30 UTC
Last updated: 2026-07-05 07:30 UTC
Primary CWE: CWE-94
Code Injection
Vendor / Product: tiddly-gittly / TidGi-Desktop
Sources: cve.org · NVD

Severity & Metrics

7.3 HIGH CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Affected products (1)

Vendor	Product	Platform	Versions
tiddly-gittly	TidGi-Desktop	—	0.1, 0.2, 0.3, 0.4 …

Weakness (CWE)

CWE	Source	Description
CWE-74	cna	Injection
CWE-94	cna	Code Injection

CVSS scores (4)

Score	Severity	Version	Source	Vector
7.5	N/D	2.0	cna	AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR
7.3	HIGH	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
7.3	HIGH	3.0	cna	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
6.9	MEDIUM	4.0	cna	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

References (6)

VDB-376309 | tiddly-gittly TidGi-Desktop Git Repository Import loadWikiTiddlersWithSubWikis.ts code injection https://vuldb.com/vuln/376309
VDB-376309 | CTI Indicators (IOB, IOC, TTP, IOA) https://vuldb.com/vuln/376309/cti
CVE-2026-14722 | CVE Analysis and Report https://vuldb.com/cve/CVE-2026-14722
Submit #847648 | tiddly-gittly TidGi Desktop 0.13.0 TidGi Desktop 0.13.0 Remote Code Execution via Untrusted TiddlyW https://vuldb.com/submit/847648
https://github.com/tiddly-gittly/TidGi-Desktop/security/advisories/GHSA-9hc2-hjx8-q6pv
https://github.com/tiddly-gittly/TidGi-Desktop/