#vulnerability
2 articles
Beware: Cline Kanban WebSocket Hijack Lets Any Website Steal Your Code & Run Commands (CVE-2026-44211)
Critical vulnerability in Cline's kanban server exposes workspace paths, git branches, and AI chat to any website you visit — and …
Claude Code Silently Skipped Your Security Prompt — Malicious Repos Could Disable It
CVE-2026-33068 let attackers bypass Claude Code's workspace trust dialog by committing a malicious .claude/settings.json. Fixed in…