Live › vulnerability › CVE-2026-116229
Go to dashboardFFXIV Teamcraft up to 11.4.31 has a flaw in the clipboard.readText function of its Electron preload script, which bridges the renderer process. A remote attacker can trigger cross-site scripting through this path, and the exploit has been publicly disclosed.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 08:28 UTC. All times on this page are UTC.
Users running the Electron desktop build of FFXIV Teamcraft at version 11.4.31 or earlier are exposed through the preload clipboard bridge. The sources do not say whether the web-hosted version is affected. Teams that do not run the desktop app can skip it.
No product ranges from the sources yet.
11.4.31 are affected.clipboard.readText in apps/electron/src/preload.ts of the source tree.11.4.32, which carries patch def118fdf36f8f3b615966893a132dd81d9cc3dc.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability was determined in ffxiv-teamcraft FFXIV Teamcraft up to 11.4.31. Impacted is the function clipboard.readText of the file apps/electron/src/preload.ts of the component Renderer-Process IPC Bridge. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 11.4.32 is recommended to address this issue. Patch name: def118fdf36f8f3b615966893a132dd81d9cc3dc. Upgrading the affected component is recommended.
This page as .md · .json · in your agent: get_signal("CVE-2026-116229")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.