Cline is an autonomous coding agent as an SDK, IDE extension, or CLI assistant. In versions 2.13.0 and prior, there is a cross-origin WebSocket hijack vulnerabi…

Cline autonomous coding agent contains a cross-origin WebSocket hijack vulnerability in its Kanban servers affecting versions 2.13.0 and prior. The vulnerability impacts the SDK, IDE extension, and CLI assistant components. No publicly available patches exist at the time of publication. This represents an active security risk for development environments using Cline. The vulnerability could potentially allow attackers to hijack WebSocket connections across different origins.