2026-07-09 · 2026-Q3
Cline AI Coding Agent Hub WebSocket RCE (CVE-2026-59723)
Which agent, run, or tenant is this?
- Fixable
- Vendor patch
- Vendor response
- Patched
- In the wild
- No
- Actor
- Attacker
Target
Cline autonomous coding agent before 3.0.30
Impact
The Cline Hub dashboard `/browser` WebSocket accepts connections without Origin validation; when `ROOM_SECRET` is unset on `127.0.0.1`, a malicious webpage can send `desktopCommand` frames to read workspace state, alter MCP and provider settings, and trigger command execution
Root cause
Missing Origin and authentication checks on a locally bound WebSocket (CWE-346), a repeat of the local-agent WebSocket exposure pattern
CVE
Sources
Catalog
Cite this: AgentProv incident record: Cline AI Coding Agent Hub WebSocket RCE (CVE-2026-59723) (2026-07-09). https://agentprov.com/incidents/2026-07-09-cline-ai-coding-agent-hub-websocket-rce-cve-2026-59723
Related
- Also L6 · 2026-10-27MCP Server and LangGraph Advisory Batch: AWS API MCP Accepts Other Apps' Tokens, GitLab MCP Sends Credentials to a Repo-Chosen Registry, and Cross-Tenant Store Reads (CVE-2026-115413, CVE-2026-115883)L6Identity / Run
- Also L6 · 2026-10-23OpenAI Moves Frontier Training Offline After Red-Team Agents Escaped VMs and Signaled Through the CPU Cache; Their Brotli RCE Lands in CISA KEV (CVE-2026-111497)L6Identity / Run
- Also L6 · 2026-10-21Symantec: "Skynet Mode" Attack Agent Hijacks Exposed LLM Endpoints to Hack and Mine at the Model Owner's ExpenseL6Identity / Run