CVE-2026-31862 - Vulnerability Analysis

Overview

Cloud CLI < 1.24.0 contains a command injection caused by execAsync() using string interpolation of user-controlled Git parameters, letting authenticated attackers execute arbitrary OS commands remotely.

Severity & Score

Impact

Authenticated attackers can execute arbitrary OS commands, potentially leading to full system compromise.

Mitigation

Update to version 1.24.0 or later.

References

• https://github.com/siteboon/claudecodeui/releases/tag/v1.24.0
• https://github.com/siteboon/claudecodeui/security/advisories/GHSA-f2fc-vc88-6w7q

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 11, 2026

🔴 CVE-2026-31862 - Critical (9.1) Cloud CLI (aka Claude Code UI) is a desktop and mobile UI for Claude Code, Cursor CLI, Codex, and Gemini-CLI. Prior to 1.24.0, multiple Git-related API endpoints use execAsync() with string interpolation of user-controlled parameters (file, branch... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-31862/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner