A vulnerability, which was classified as critical, has been found in siteboon claude-code-ui. Affected by this issue is some unknown functionality of the component Websocket Handler. The manipulation leads to os command injection.
This vulnerability is documented as CVE-2026-31975. The attack can be initiated remotely. There is not any exploit available.
It is advisable to upgrade the affected component.
