Skip to content

Product

siteboon @siteboon/claude-code-ui vulnerabilities

3 published CVES affecting siteboon @siteboon/claude-code-ui, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
3
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest siteboon @siteboon/claude-code-ui CVEs

Newest publication first

  1. CVE-2026-31975 Cloud CLI WebSocket shell injection

    Published
    HighCVSS 8.7 EPSS 3.9%

    Cloud CLI (aka Claude Code UI) is a desktop and mobile UI for Claude Code, Cursor CLI, Codex, and Gemini-CLI. Prior to 1.25.0, OS Command Injection via WebSocket Shell. Both projectPath and initialCommand in server/index.js are taken directly from the WebSocket message payload an...

  2. CVE-2026-31861 Shell Command Injection in Git Routes [CloudCLI UI]

    Published
    HighCVSS 8.7 EPSS 6.8%

    Cloud CLI (aka Claude Code UI) is a desktop and mobile UI for Claude Code, Cursor CLI, Codex, and Gemini-CLI. Prior to 1.24.0, The /api/user/git-config endpoint constructs shell commands by interpolating user-supplied gitName and gitEmail values into command strings passed to chi...

  3. CVE-2026-31862 Cloud CLI has Command Injection via Multiple Parameters

    Published
    HighCVSS 8.8 EPSS 0.50%

    Cloud CLI (aka Claude Code UI) is a desktop and mobile UI for Claude Code, Cursor CLI, Codex, and Gemini-CLI. Prior to 1.24.0, multiple Git-related API endpoints use execAsync() with string interpolation of user-controlled parameters (file, branch, message, commit), allowing auth...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.