Critical “Cline” AI Agent Vulnerability Enables RCE Attacks

A critical security flaw has been identified in the Cline Kanban server that allows threat actors to exfiltrate workspace data and execute arbitrary code silently and remotely. Security researcher TheRealSpencer recently published details of this cross-origin WebSocket hijacking vulnerability affecting the widely adopted open-source AI coding assistant. The vulnerability is tracked as CVE-2026-44211 and carries […]

The post Critical “Cline” AI Agent Vulnerability Enables RCE Attacks appeared first on Cyber Security News.