CVE-2026-59723

Cline is an autonomous coding agent as an SDK, IDE extension, or CLI assistant. Prior to 3.0.30, the Cline Hub dashboard server launched by the cline dashboard command accepts WebSocket connections on the /browser endpoint without validating the Origin header, and when ROOM_SECRET is unset for local 127.0.0.1 binds, isAuthorizedBrowserRequest() allows attacker-controlled websites to send desktopCommand frames that read workspace state, mutate MCP and provider settings, and trigger command execution when a provider or model is configured. This issue is fixed in version 3.0.30.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.1 / Impact : 6.0

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://github.com/cline/cline/commit/d09270940f5746f288cfc4a5039b46a2f4d5d01e	Patch
https://github.com/cline/cline/pull/11724	Issue Tracking Patch
https://github.com/cline/cline/releases/tag/cli-v3.0.30	Release Notes
https://github.com/cline/cline/security/advisories/GHSA-3cj3-hqcr-g934	Exploit Vendor Advisory
https://github.com/cline/cline/security/advisories/GHSA-3cj3-hqcr-g934	Exploit Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:cline:cline:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2026-07-08 23:16

Updated : 2026-08-26 16:26

NVD link : CVE-2026-59723

Mitre link : CVE-2026-59723

CVE.ORG link : CVE-2026-59723

JSON object : View

Products Affected

cline

cline

CWE

CWE-346

Origin Validation Error

{"id": "CVE-2026-59723", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-59723", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-07-09T00:00:00+00:00"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.1}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "cline", "product": "cline", "versions": [{"status": "affected", "version": "< 3.0.30"}]}]}], "published": "2026-07-08T23:16:56.440", "references": [{"url": "https://github.com/cline/cline/commit/d09270940f5746f288cfc4a5039b46a2f4d5d01e", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/cline/cline/pull/11724", "tags": ["Issue Tracking", "Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/cline/cline/releases/tag/cli-v3.0.30", "tags": ["Release Notes"], "source": "security-advisories@github.com"}, {"url": "https://github.com/cline/cline/security/advisories/GHSA-3cj3-hqcr-g934", "tags": ["Exploit", "Vendor Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/cline/cline/security/advisories/GHSA-3cj3-hqcr-g934", "tags": ["Exploit", "Vendor Advisory"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-346"}]}], "descriptions": [{"lang": "en", "value": "Cline is an autonomous coding agent as an SDK, IDE extension, or CLI assistant. Prior to 3.0.30, the Cline Hub dashboard server launched by the cline dashboard command accepts WebSocket connections on the /browser endpoint without validating the Origin header, and when ROOM_SECRET is unset for local 127.0.0.1 binds, isAuthorizedBrowserRequest() allows attacker-controlled websites to send desktopCommand frames that read workspace state, mutate MCP and provider settings, and trigger command execution when a provider or model is configured. This issue is fixed in version 3.0.30."}], "lastModified": "2026-08-26T16:26:56.703", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cline:cline:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E43D48D9-2B80-46F2-9D52-A5EE042F9AE8", "versionEndExcluding": "3.0.30"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}