TI-2026-32190 CVE-2026-44211 · GHSA-5c57-rqjx-35g2
Cline Kanban Server has a Cross-Origin WebSocket Hijacking Vulnerability
Priority HIGH 76
Cline is an autonomous coding agent as an SDK, IDE extension, or CLI assistant.
cline
Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
cline records in CISA KEVNo cline vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
3 records
TI-2026-42592 CVE-2026-59723 · GHSA-3cj3-hqcr-g934
Cline: Cross-Origin WebSocket Hijacking in Cline Hub Dashboard (`/browser` endpoint)
Priority HIGH 73
Cline is an autonomous coding agent as an SDK, IDE extension, or CLI assistant.
TI-2026-23512 CVE-2026-30313 · GHSA-rfcm-98h7-2567
DSAI-Cline's command auto-approval module contains a critical OS command injection…
Priority MEDIUM 51
DSAI-Cline's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective.