critical9.6
CVE-2026-44211
Cline is an autonomous coding agent as an SDK, IDE extension, or CLI assistant.
Impact
Cline is an autonomous coding agent as an SDK, IDE extension, or CLI assistant. In versions 2.13.0 and prior, there is a cross-origin WebSocket hijack vulnerability in Cline Kanban servers. At time of publication, there are no publicly available patches.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | cline | <= 2.13.0 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cline | Cline | through 2.13.0 |