VULNERABILITY INTELLIGENCE

CVE-2026-44211

CVSS score9.6 CRITICAL

EPSS probability0.18%

CISA KEVNot currently listed

Published2026-06-01

Last modified2026-07-22

Description

Cline is an autonomous coding agent as an SDK, IDE extension, or CLI assistant. In versions 2.13.0 and prior, there is a cross-origin WebSocket hijack vulnerability in Cline Kanban servers. At time of publication, there are no publicly available patches.