Executive brief
DSAI-Cline is an autonomous coding agent used within IDEs to automate tasks like file editing and command execution. A critical security flaw in its command auto-approval feature allows attackers to bypass safety checks and execute unauthorized commands on the user's system. This could lead to a total system takeover, data theft, or the installation of malicious software without any user interaction.
Technical details
An OS command injection vulnerability (CWE-78) exists in DSAI-Cline's Tool Call Parser and Command Validation Logic. The system uses string-based parsing to validate commands against a whitelist, filtering for common operators like ';', '&&', and '|', but fails to sanitize raw newline characters. By embedding a literal newline between a legitimate whitelisted command and a malicious payload, an attacker can trick the auto-approval module into validating only the first part of the string. When passed to the underlying PowerShell interpreter, the newline acts as a command separator, leading to Remote Code Execution (RCE). This affects versions up to and including 1.1.2.
Affected products
- DSAI-Cline Cline-DSAI <= 1.1.2
Timeline
- 2026-03-27: disclosed: Vulnerability reported on GitHub issues
- 2026-03-31: advisory: CVE-2026-30312 published