GitButler, a Git‑based interface for AI workflows, contains a code‑injection flaw (CWE‑94) in its Tauri‑based desktop application before version 0.19.7. An attacker can place a malicious link within a pull‑request body; when the user opens that link, the app interprets it as a script and executes arbitrary code inside the Tauri webview. This vulnerability grants full control of the victim’s desktop environment and compromises confidentiality, integrity, and availability of all data handled by the application.

The affected product is GitButler (gitbutlerapp:gitbutler). Only installations using the forge integration feature are vulnerable. Versions prior to 0.19.7 are impacted; newer releases contain the fix.

The CVSS score of 9.3 indicates a high‑severity remote code execution risk. EPSS data is not available and the vulnerability is not listed in CISA KEV, but the need for a user click makes it a social‑engineering scenario with a clear attack vector. The impact is system‑wide for the compromised desktop, and the exploitation requires only that a user opens a crafted pull‑request link.