CVE-2026-44211

9.6 Critique

Publiée le 01/06/2026 à 19:17 · Modifiée le 22/07/2026 à 09:10 · Analysée par le NVD · Source : security-advisories@github.com

Description

Cline is an autonomous coding agent as an SDK, IDE extension, or CLI assistant. In versions 2.13.0 and prior, there is a cross-origin WebSocket hijack vulnerability in Cline Kanban servers. At time of publication, there are no publicly available patches.

Traduire en français

Produits concernés

cline
Cline cline

Scores CVSS

Version	Score	Source	Vecteur
3.1	9.6 Critique	security-advisories@github.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-306
CWE-1385

Références

https://github.com/cline/cline/security/advisories/GHSA-5c57-rqjx-35g2 ExploitMitigationVendor Advisory
https://github.com/cline/cline/security/advisories/GHSA-5c57-rqjx-35g2 ExploitMitigationVendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories