cline records
3 published records for vendor cline.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 33.3%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-306 Missing Authentication for Critical Function1
- CWE-346 Origin Validation Error1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2026-30313No exploit | DSAI-Cline's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanicline · cline · CWE-94 | Critical9.8 | — | 2.1% | Mar 30, 2026 |
38Monitor | CVE-2026-44211No exploit | Cline Kanban Server has a Cross-Origin WebSocket Hijacking Vulnerabilitycline · cline · CWE-306 | Critical9.6 | — | 0.2% | Jun 1, 2026 |
35Monitor | CVE-2026-59723No exploit | Cline: Cross-Origin WebSocket Hijacking in Cline Hub Dashboard (`/browser` endpoint)cline · cline · CWE-346 | High8.8 | — | 0.2% | Jul 8, 2026 |
- CVE-2026-3031340Plan
DSAI-Cline's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechani
CriticalCVSS 9.8No exploitEPSS 2%cline · clineMar 30, 2026
- CVE-2026-4421138Monitor
Cline Kanban Server has a Cross-Origin WebSocket Hijacking Vulnerability
CriticalCVSS 9.6No exploitEPSS 0%cline · clineJun 1, 2026
- CVE-2026-5972335Monitor
Cline: Cross-Origin WebSocket Hijacking in Cline Hub Dashboard (`/browser` endpoint)
HighCVSS 8.8No exploitEPSS 0%cline · clineJul 8, 2026