Cline Kanban Flaw Lets Websites Hijack AI Coding Agents

A critical vulnerability (CVSS 9.7) in Cline's Kanban local server (Kanban npm v0.1.59) exposes three unauthenticated WebSocket endpoints that lack origin validation, allowing any webpage a developer visits to silently exfiltrate workspace data, push commands into the agent's terminal (leading to remote code execution), or kill agent sessions; Oasis Security disclosed the issue and a patch is available in v0.1.66, with the recommendation to disable Cline's default "bypass permissions" to limit impact.