What is the CVSS score of CVE-2026-31862?

CVE-2026-31862 has a CVSS 3.1 base score of 9.1 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Cloud Cli are affected by CVE-2026-31862?

A critical vulnerability (CVSS 9.1) in Cloud CLI affects desktop and mobile users of Claude Code, Cursor CLI, Codex, and Gemini-CLI environments.. A patch is available.

How to fix or mitigate CVE-2026-31862?

Within 24 hours: Inventory all Cloud CLI installations across development teams and restrict network access to affected services where possible. Within 7 days: Issue security advisory to development staff advising against use of affected Cloud CLI versions; identify alternative development workflows and prepare isolated sandbox environments for necessary use cases. Within 30 days: Maintain close monitoring of vendor security advisories for patch availability; conduct forensic audit of Cloud CLI usage logs for indicators of compromise; implement mandatory upgrade procedures once patches are released.

Cloud Cli CVE-2026-31862

CRITICAL

OS Command Injection (CWE-78)

2026-03-11 security-advisories@github.com

GHSA-f2fc-vc88-6w7q

Command Injection Cloud Cli

9.1

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

9.1 CRITICAL

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 12, 2026 - 22:06 vuln.today

CVE Published

Mar 11, 2026 - 18:16 nvd

CRITICAL 9.1

DescriptionGitHub Advisory

Cloud CLI (aka Claude Code UI) is a desktop and mobile UI for Claude Code, Cursor CLI, Codex, and Gemini-CLI. Prior to 1.24.0, multiple Git-related API endpoints use execAsync() with string interpolation of user-controlled parameters (file, branch, message, commit), allowing authenticated attackers to execute arbitrary OS commands. This vulnerability is fixed in 1.24.0.