CVE-2026-44211

Cline is an autonomous coding agent as an SDK, IDE extension, or CLI assistant. In versions 2.13.0 and prior, there is a cross-origin WebSocket hijack vulnerability in Cline Kanban servers. At time of publication, there are no publicly available patches.

• CWE-306
• CWE-1385

• https://github.com/cline/cline/security/advisories/GHSA-5c57-rqjx-35g2Exploit, Mitigation, Vendor Advisory
• https://github.com/cline/cline/security/advisories/GHSA-5c57-rqjx-35g2Exploit, Mitigation, Vendor Advisory

Published

Jun 1, 2026

Last Modified

Jul 22, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-44205Frappe is a full-stack web application framework. Prior to v…6.9
• CVE-2026-44206Frappe is a full-stack web application framework. Prior to v…6.9
• CVE-2026-44207Frappe is a full-stack web application framework. Prior to v…6.9
• CVE-2026-44208Frappe is a full-stack web application framework. Prior to v…6.9
• CVE-2026-44209Banks generates meaningful LLM prompts using a template lang…7.5
• CVE-2026-44210Kata Containers is an open source project focusing on a stan…9.9
• CVE-2026-44212PrestaShop is an open source e-commerce web application. Pri…9.3
• CVE-2026-44213The OpenTelemetry.Exporter.Instana exports telemetry to Inst…6.5
• CVE-2026-44214eventsource-encoder encodes events as well-formed EventSourc…5.3
• CVE-2026-44215NanaZip is an open source file archive. From 5.0.1252.0 to b…7.1
• CVE-2026-44216Wasmtime is a runtime for WebAssembly. From 30.0.0 to 36.0.8…7.5
• CVE-2026-44217sse-channel is an SSE-implementation which can be used to an…6.6