https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 21:13:59 +0000 https://vulnerability.circl.lu/vuln/cve-2026-44211 <p><strong>Affected:</strong> cline</p> <p>Cline is an autonomous coding agent as an SDK, IDE extension, or CLI assistant. In versions 2.13.0 and prior, there is a cross-origin WebSocket hijack vulnerability in Cline Kanban servers. At time of publication, there are no publicly available patches.</p> <p><strong>Affected:</strong> cline</p> <p>Cline is an autonomous coding agent as an SDK, IDE extension, or CLI assistant. In versions 2.13.0 and prior, there is a cross-origin WebSocket hijack vulnerability in Cline Kanban servers. At time of publication, there are no publicly available patches.</p> https://vulnerability.circl.lu/vuln/cve-2026-44211 https://vulnerability.circl.lu/vuln/ghsa-5c57-rqjx-35g2 <p><strong>Affected:</strong> npm: cline</p> <p>## Summary</p> <p>The `kanban` npm package (used by the `cline` CLI) starts a WebSocket server on `127.0.0.1:3484` with no Origin header validation. Any website a developer visits can silently connect to the kanban server via WebSocket and:</p> <p>1. Leak sensitive data in real-time: workspace filesystem paths, task titles/descriptions, git branch info, AI agent chat messages 2. Hijack running AI agent terminals by injecting arbitrary prompts into the agent&#39;s input, leading to remote code execution 3. Kill running agent tasks by terminating active sessions via the control WebSocket</p> <p>WebSocket connections are not subject to CORS restrictions. The browser sends them freely to localhost regardless of the page&#39;s origin. The kanban server accepts all connections without checking the Origin header.</p> <p>## Affected Component</p> <p>- Package: `kanban` on npm (https://www.npmjs.com/package/kanban) - Repository: https://github.com/cline/kanban - Tested version: 0.1.59 - Installed via: `cline` CLI (`cline --kanban` or default `cline` command) - Endpoints: `ws://127.0.0.1:3484/api/runtime/ws`, `ws://127.0.0.1:3484/api/terminal/io`, `ws://127.0.0.1:3484/api/terminal/control`</p> <p>## Root Cause</p> <p>Three WebSocket endpoints are exposed without authentication or Origin validation.</p> <p>### 1. Runtime state stream (no Origin check on upgrade)</p> <p>```javascript server.on(&#34;upgrade&#34;, (request, socket, head) =&gt; { if (normalizeRequestPath(requestUrl.pathname) !== &#34;/api/runtime/ws&#34;) { return; } // No Origin he…</p> <p><strong>Affected:</strong> npm: cline</p> <p>## Summary</p> <p>The `kanban` npm package (used by the `cline` CLI) starts a WebSocket server on `127.0.0.1:3484` with no Origin header validation. Any website a developer visits can silently connect to the kanban server via WebSocket and:</p> <p>1. Leak sensitive data in real-time: workspace filesystem paths, task titles/descriptions, git branch info, AI agent chat messages 2. Hijack running AI agent terminals by injecting arbitrary prompts into the agent&#39;s input, leading to remote code execution 3. Kill running agent tasks by terminating active sessions via the control WebSocket</p> <p>WebSocket connections are not subject to CORS restrictions. The browser sends them freely to localhost regardless of the page&#39;s origin. The kanban server accepts all connections without checking the Origin header.</p> <p>## Affected Component</p> <p>- Package: `kanban` on npm (https://www.npmjs.com/package/kanban) - Repository: https://github.com/cline/kanban - Tested version: 0.1.59 - Installed via: `cline` CLI (`cline --kanban` or default `cline` command) - Endpoints: `ws://127.0.0.1:3484/api/runtime/ws`, `ws://127.0.0.1:3484/api/terminal/io`, `ws://127.0.0.1:3484/api/terminal/control`</p> <p>## Root Cause</p> <p>Three WebSocket endpoints are exposed without authentication or Origin validation.</p> <p>### 1. Runtime state stream (no Origin check on upgrade)</p> <p>```javascript server.on(&#34;upgrade&#34;, (request, socket, head) =&gt; { if (normalizeRequestPath(requestUrl.pathname) !== &#34;/api/runtime/ws&#34;) { return; } // No Origin he…</p> https://vulnerability.circl.lu/vuln/ghsa-5c57-rqjx-35g2