CVE-2026-31975
Critical
Description
Cloud CLI (aka Claude Code UI) is a desktop and mobile UI for Claude Code, Cursor CLI, Codex, and Gemini-CLI. Prior to 1.25.0, OS Command Injection via WebSocket Shell. Both projectPath and initialCommand in server/index.js are taken directly from the WebSocket message payload and interpolated into a bash command string without any sanitization, enabling arbitrary OS command execution. A secondary injection vector exists via unsanitized sessionId. This vulnerability is fixed in 1.25.0.
SeverityCritical
CVSS9.8
Exploit probability—
ProductCloudcli Cloud Cli
PublishedMar 11, 2026
First seenMar 11, 2026
Weakness typeCWE-78OS command injection
How to fix
Update
- cloudcli cloud_cli1.25.0 or later
- @siteboon/claude-code-ui1.25.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cloudcli cloud_cli | v < 1.25.0 | 1.25.0 |
| @siteboon/claude-code-uinpm | v < 1.25.0 | 1.25.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.