CVE-2026-44211 Details
Description
Cline is an autonomous coding agent as an SDK, IDE extension, or CLI assistant. In versions 2.13.0 and prior, there is a cross-origin WebSocket hijack vulnerability in Cline Kanban servers. At time of publication, there are no publicly available patches.
A cross-origin WebSocket hijack vulnerability has been identified in Cline Kanban servers, specifically in versions prior to 2.13.0. This vulnerability allows any website visited by a developer to silently connect to the Kanban server's WebSocket endpoints without Origin header validation. As a result, sensitive data can be leaked in real-time, including workspace filesystem paths, task details, git branch information, and AI agent chat messages. Additionally, the vulnerability enables hijacking of active AI agent terminals by injecting prompts, leading to remote code execution. It also allows termination of running agent tasks via a control WebSocket.
To address this vulnerability, it is recommended to validate the Origin header on all WebSocket upgrade requests, require a session token for WebSocket connections, and authenticate terminal WebSocket connections to ensure they originate from the legitimate Kanban UI.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jun 3, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/cline/cline/security/advisories/GHSA-5c57-rqjx-35g2 | CISA-ADP | ExploitMitigationVendor Advisory |
| https://github.com/cline/cline/security/advisories/GHSA-5c57-rqjx-35g2 | [email protected] | ExploitMitigationVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-1385 | Missing Origin Validation in WebSockets | [email protected] |
| CWE-306 | Missing Authentication for Critical Function | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| cline cline | <= 2.13.0 |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 22, 2026 | CVE Translated | [email protected] |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 3, 2026 | Initial Analysis | [email protected] |
| Jun 1, 2026 | CVE Modified | CISA-ADP |
| Jun 1, 2026 | New CVE Received | [email protected] |