Cline is an autonomous coding agent as an SDK, IDE extension, or CLI assistant. In versions 2.13.0 and prior, there is a cross-origin WebSocket hijack vulnerabi…

CVE-2026-44211 affects Cline, an autonomous coding agent available as SDK, IDE extension, or CLI assistant. Versions 2.13.0 and prior contain a cross-origin WebSocket hijack vulnerability in Cline Kanban servers. The vulnerability allows attackers to hijack WebSocket connections across different origins. No publicly available patches exist at the time of publication. The issue impacts the security of Cline's server component used for Kanban functionality. Users should consider mitigating measures until patches become available.