# CVE-2026-31862: @siteboon/claude-code-ui is Vulnerable to Command Injection via Multiple Parameters

Source: https://junglewise.ai/threats/cve-2026-31862-siteboon-claude-code-ui-command-injection-in-git-endpoints  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-03-11. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-31862 · Severity: critical · CVSS 9.1 · Published 2026-03-11

@siteboon/claude-code-ui is a Node.js application that provides a web-based interface for Git repository operations. Multiple Git API endpoints are vulnerable to command injection, allowing authenticated users to execute arbitrary operating system commands with the privileges of the Node.js process. This can lead to complete server compromise, data theft, or injection of malicious code into the repository.

Technologies: [@siteboon/claude-code-ui (npm)](https://junglewise.ai/threats/technologies/siteboon-claude-code-ui), [Siteboon Claude-Code-Ui](https://junglewise.ai/threats/technologies/claude-code-ui). Vendors: [npm](https://junglewise.ai/threats/vendors/npm), [Siteboon](https://junglewise.ai/threats/vendors/siteboon).

## Quick answers

**Is CVE-2026-31862 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-31862 being exploited in the wild.

**How severe is CVE-2026-31862?** Critical severity, with a CVSS score of 9.1, published 11 March 2026.

**Which products and versions are affected?** @siteboon/claude-code-ui (npm) <= 1.23.0; @siteboon/claudecodeui (npm) SEMVER:introduced=0,fixed=1.24.0; Siteboon Claude-Code-Ui <=1.23.0.

**Is there a fix for CVE-2026-31862?** Yes. @siteboon/claudecodeui (npm): upgrade to 1.24.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-31862 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-31862?** Check whether you run @siteboon/claude-code-ui (npm), @siteboon/claudecodeui (npm) or Siteboon Claude-Code-Ui at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- @siteboon/claudecodeui (npm): upgrade to 1.24.0 or later

  ```sh
  npm install @siteboon/claudecodeui@1.24.0
  ```


## Technical details

The vulnerability exists in server/routes/git.js where multiple endpoints use execAsync() to execute shell commands with user-supplied parameters (file paths, branch names, commit messages, and commit hashes) directly interpolated into command strings. The application attempts basic escaping of double quotes but this is easily bypassed using shell metacharacters such as $(command), `command`, semicolons, &&, ||, and newlines. Affected endpoints include GET /api/git/diff, POST /api/git/commit, POST /api/git/checkout, and others. Authentication is required to reach these endpoints, but once authenticated, an attacker can inject arbitrary commands. The fix replaces all vulnerable execAsync() calls with spawnAsync() (using child_process.spawn with shell: false) so that user input is passed as discrete arguments rather than interpreted by a shell. Additional allowlist validation using /^[0-9a-f]{4,64}$/i was added for commit hashes.

## Affected products

- siteboon claude-code-ui <=1.23.0

## Identifiers

- CVE-2026-31862
- GHSA-f2fc-vc88-6w7q

## Timeline

- 2026-03-11: disclosed: CVE-2026-31862 and GHSA-f2fc-vc88-6w7q published
- 2026-03-11: patched: Fix released in version 1.24.0 (commit 55567f4)

## References

- [https://github.com/siteboon/claudecodeui/security/advisories/GHSA-f2fc-vc88-6w7q](https://github.com/siteboon/claudecodeui/security/advisories/GHSA-f2fc-vc88-6w7q)

## Related threats

- [@siteboon/claude-code-ui unauthenticated RCE via WebSocket shell injection](https://junglewise.ai/threats/cve-2026-31975-siteboon-claude-code-ui-unauthenticated-rce-via-websocket-shell)
- [@siteboon/claude-code-ui shell command injection in git config endpoint](https://junglewise.ai/threats/cve-2026-31861-siteboon-claude-code-ui-shell-command-injection-in-git-config)