IDEs & agents · Cline
Cline
Open-source autonomous coding agent for VS Code.
2Advisories
0critical
2high
0medium
2026-10-13Latest
Timeline · advisories per quarter
12025 Q2
12026 Q4
Named in sources
Reported for Cline
Nothing reported against Cline directly yet.
Same pattern
Also worth checking
01. Roo Code: five ways to slip denied commands past auto-approve (CVE-2026-110202 to 110206), no fix comingRoo Code through 3.54.0 has five command-approval bypasses. With auto-approve on, a prompt injection can get a denied shell command run on your machine by hiding it behind an allowlisted command like echo. The project was archived in May 2026, so no patch is expected. 
Roo Code Cline 2026-10-13 02. MCP tool poisoning: hidden instructions in tool descriptionsAn MCP server can hide instructions inside a tool’s description. The model reads them, the user usually doesn’t, and the agent can be steered into reading files or sending data elsewhere. 
MCP SDKs & servers 
Cursor 
Claude Code +2 more 2025-04-01
Roo Code Cline 2026-10-13 02. MCP tool poisoning: hidden instructions in tool descriptionsAn MCP server can hide instructions inside a tool’s description. The model reads them, the user usually doesn’t, and the agent can be steered into reading files or sending data elsewhere. MCP SDKs & servers Cursor Claude Code +2 more 2025-04-01