# CVE-2026-31975: @siteboon/claude-code-ui unauthenticated RCE via WebSocket shell injection

Source: https://junglewise.ai/threats/cve-2026-31975-siteboon-claude-code-ui-unauthenticated-rce-via-websocket-shell  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-03-11. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-31975 · Severity: medium · CVSS 4 · Published 2026-03-11

@siteboon/claude-code-ui is a Node.js web application that provides a code editing and shell interface. The application is vulnerable to unauthenticated remote code execution: attackers can forge authentication tokens using a hardcoded default secret, bypass WebSocket validation, and execute arbitrary OS commands through unsanitized shell command parameters. Any instance running with default configuration is immediately compromisable without any credentials.

Technologies: [@siteboon/claude-code-ui (npm)](https://junglewise.ai/threats/technologies/siteboon-claude-code-ui), [Siteboon Claude-Code-Ui](https://junglewise.ai/threats/technologies/claude-code-ui). Vendors: [npm](https://junglewise.ai/threats/vendors/npm), [Siteboon](https://junglewise.ai/threats/vendors/siteboon).

## Quick answers

**Is CVE-2026-31975 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-31975 being exploited in the wild.

**How severe is CVE-2026-31975?** Medium severity, with a CVSS score of 4, published 11 March 2026.

**Which products and versions are affected?** @siteboon/claude-code-ui (npm) SEMVER:introduced=0,fixed=1.25.0; Siteboon Claude-Code-Ui <= 1.24.0.

**Is there a fix for CVE-2026-31975?** Yes. @siteboon/claude-code-ui (npm): upgrade to 1.25.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-31975 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-31975?** Check whether you run @siteboon/claude-code-ui (npm) or Siteboon Claude-Code-Ui at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- @siteboon/claude-code-ui (npm): upgrade to 1.25.0 or later

  ```sh
  npm install @siteboon/claude-code-ui@1.25.0
  ```


## Technical details

The vulnerability chains three distinct flaws: (1) an insecure default JWT secret ('claude-ui-dev-secret-change-in-production') that is public in source code and used when JWT_SECRET environment variable is unset, (2) a WebSocket authenticator that verifies JWT signature but skips database user validation—unlike REST endpoints—allowing forged tokens with non-existent userIds to authenticate, and (3) OS command injection in the WebSocket shell handler where projectPath and initialCommand parameters are directly interpolated into bash commands without sanitization (CWE-78). The attack requires network access to the WebSocket endpoint but no prior authentication or user interaction. An unauthenticated attacker can achieve full OS command execution as the server process user, read/write files, and pivot laterally. The patch is available in version 1.25.0.

## Affected products

- @siteboon claude-code-ui <= 1.24.0

## Identifiers

- CVE-2026-31975
- GHSA-gv8f-wpm2-m5wr

## Timeline

- 2026-03-10: disclosed
- 2026-03-10: patched: Fixed in version 1.25.0

## References

- [https://github.com/siteboon/claudecodeui/security/advisories/GHSA-gv8f-wpm2-m5wr](https://github.com/siteboon/claudecodeui/security/advisories/GHSA-gv8f-wpm2-m5wr)

## Related threats

- [@siteboon/claude-code-ui is Vulnerable to Command Injection via Multiple Parameters](https://junglewise.ai/threats/cve-2026-31862-siteboon-claude-code-ui-command-injection-in-git-endpoints)
- [@siteboon/claude-code-ui shell command injection in git config endpoint](https://junglewise.ai/threats/cve-2026-31861-siteboon-claude-code-ui-shell-command-injection-in-git-config)