Broken Access Control
-
Zero Auth, Full Control: The Risks of Open Claude Code Web UIs
A security analysis of open-source web UIs for Claude Code, with unauthenticated RCE, path traversal and client-side auth bypasses.
-
OpenCode Web: Great Tool, Dangerous Default
OpenCode is a multi-model alternative to Claude Code and its web interface can be a serious problem if you leave the defaults alone.