CVE-2026-30312

DSAI-Cline's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective. The system relies on string-based parsing to validate commands; while it intercepts dangerous operators such as ;, &&, ||, |, and command substitution patterns, it fails to account for raw newline characters embedded within the input. An attacker can construct a payload by embedding a literal newline between a whitelisted command and malicious code (e.g., git log malicious_command), forcing DSAI-Cline to misidentify it as a safe operation and automatically approve it. The underlying PowerShell interpreter treats the newline as a command separator, executing both commands sequentially, resulting in Remote Code Execution without any user interaction.

• CWE-78

• https://github.com/Secsys-FDU/LLM-Tool-Calling-CVEs/issues/9
• https://github.com/necboy/cline-DSAI

Published

Mar 31, 2026

Last Modified

Jul 25, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-30307Roo Code's command auto-approval module contains a critical …9.8
• CVE-2026-30308In its design for automatic terminal command execution, HAI …9.8
• CVE-2026-30309InfCode's terminal auto-execution module contains a critical…7.8
• CVE-2026-3031Image::EPEG versions through 0.15 for Perl embeds an unsuppo…9.8
• CVE-2026-30310In its design for automatic terminal command execution, Sixt…9.8
• CVE-2026-30311Ridvay Code's command auto-approval module contains a critic…9.8
• CVE-2026-30313DSAI-Cline's command auto-approval module contains a critica…9.8
• CVE-2026-30314Ridvay Code's command auto-approval module contains a critic…9.8
• CVE-2026-30332A Time-of-Check to Time-of-Use (TOCTOU) race condition vulne…7.5
• CVE-2026-3034The OoohBoi Steroids for Elementor plugin for WordPress is v…6.4
• CVE-2026-30345A zip slip vulnerability in the Admin import functionality o…7.5
• CVE-2026-30346An open redirect in the /api/google/authorize endpoint of hu…4.3