{"data":{"id":"50ca9ca7-e1c7-4479-a050-5fef7a43a48d","title":"CVE-2026-31975: Cloud CLI (aka Claude Code UI) is a desktop and mobile UI for Claude Code, Cursor CLI, Codex, and Gemini-CLI. Prior to…","summary":"CVE-2026-31975 affects Cloud CLI (aka Claude Code UI), a desktop and mobile UI for Claude Code, Cursor CLI, Codex, and Gemini-CLI, in versions prior to 1.25.0. The projectPath and initialCommand values in server/index.js are taken directly from the WebSocket message payload and interpolated into a bash command string without sanitization, enabling arbitrary OS command execution. A secondary injection vector exists through the unsanitized sessionId.","solution":"Fixed in 1.25.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-31975","publishedAt":"2026-03-11T18:16:27.177Z","cveId":"CVE-2026-31975","cweIds":["CWE-78"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["@siteboon/claude-code-ui@<= 1.24.0 (fixed: 1.25.0)"],"affectedPackageNames":["@siteboon/claude-code-ui"],"affectedPackageRefs":["npm:@siteboon/claude-code-ui"],"affectedVendors":[],"affectedVendorsRaw":["Claude Code UI","Claude Code","Cursor CLI","Codex","Gemini-CLI"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Cloud CLI OS command injection via WebSocket shell","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.0357,"epssCheckedAt":"2026-11-04T06:10:14.827Z","kevDateAdded":null,"advisoryAliases":["GHSA-gv8f-wpm2-m5wr"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:50:28.849Z","patchAvailable":true,"disclosureDate":"2026-03-11T18:16:27.177Z","fixReleasedAt":"2026-03-10T16:27:06.828Z","daysToFix":-1,"fixCheckedAt":"2026-10-29T21:39:56.017Z","capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"@siteboon/claude-code-ui","fixedVersion":"1.25.0","matchedVersion":"1.25.0","fixReleasedAt":"2026-03-10T16:27:06.828Z","daysToFix":-1,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:39:55.871Z"}]}}