Cline AI Coding Agent Vulnerabilities
Date: 2025-08
Affected: Cline AI Coding Agent Vulnerabilities
Attack vector: prompt-injection
Category: real-world
Severity: Medium

Four vulnerabilities: API key exfiltration, arbitrary code execution, model information leakage, and prompt injection via Python docstrings or Markdown configs. Opening an infected repository and asking Cline to analyze it triggers attacker commands without user approval.


Mitigations:

Architectural layers (MAESTRO):