CVE-2026-31975

npm/@siteboon/claude-code-ui CVE-2026-31975: high, EPSS 4.46%

@siteboon/claude-code-ui Vulnerable to Unauthenticated RCE via WebSocket Shell Injection

Action: Upgrade @siteboon/claude-code-ui to 1.25.0 or later.

npm i @siteboon/claude-code-ui@1.25.0

Affected

Fixed versions

Sources

• osv: GHSA-gv8f-wpm2-m5wr
• https://github.com/siteboon/claudecodeui/security/advisories/GHSA-gv8f-wpm2-m5wr
• https://nvd.nist.gov/vuln/detail/CVE-2026-31975
• https://github.com/siteboon/claudecodeui/commit/12e7f074d9563b3264caf9cec6e1b701c301af26
• https://github.com/siteboon/claudecodeui
• https://github.com/siteboon/claudecodeui/releases/tag/v1.25.0

CVE-2026-31975 · published 2026-03-11T00:37:25Z · modified 2026-03-13T10:56:23.916800Z · JSON