market · May 21, 2026
Cline AI Agent CVE-2026-44211 Exposes Kanban WebSocket to RCE
Share the canonical public link.
Security researcher Sagilayani disclosed CVE-2026-44211 on May 12, 2026, affecting the kanban npm package bundled with Cline AI coding assistant versions before v2.13.0. The flaw starts a WebSocket server on 127.0.0.1:3484 with no Origin header validation, enabling any website to connect and leak workspace data including filesystem paths, git branches, task titles, and AI chat messages. Attackers can hijack /api/terminal/io to inject arbitrary shell commands for remote code execution or use /api/terminal/control to terminate active agent sessions. CVSS v3.1 score reached 9.3 with CWE-306 and CWE-1385 root causes; no patch available at disclosure and Oasis Security reported a similar CVSS 9.7 issue fixed in kanban package version 0.1.66.