← CVE Intelligence

CVE-2026-44211

Cline Kanban Server has a Cross-Origin WebSocket Hijacking Vulnerability PUBLISHED

Description (CNA)

Cline is an autonomous coding agent as an SDK, IDE extension, or CLI assistant. In versions 2.13.0 and prior, there is a cross-origin WebSocket hijack vulnerability in Cline Kanban servers. At time of publication, there are no publicly available patches.

Affected (CNA)

Vendor / productVersions
cline / clineaffected <= 2.13.0

CWE

CWE-306, CWE-1385

References

ADP enrichment

CISA-ADP

No English description supplied.