Quick answers
- Is CVE-2026-30312 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-30312 being exploited in the wild.
- How severe is CVE-2026-30312?
- Critical severity, with a CVSS score of 9.8, published 31 March 2026.
- Which products and versions are affected?
- Cline <= 1.1.2.
- Is there a fix for CVE-2026-30312?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-30312 attacked?
- It is attacked over the network, in a network appliance.
- Am I affected by CVE-2026-30312?
- Check whether you run Cline at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
An OS command injection vulnerability (CWE-78) exists in DSAI-Cline's Tool Call Parser and Command Validation Logic. The system uses string-based parsing to validate commands against a whitelist, filtering for common operators like ';', '&&', and '|', but fails to sanitize raw newline characters. By embedding a literal newline between a legitimate whitelisted command and a malicious payload, an attacker can trick the auto-approval module into validating only the first part of the string. When passed to the underlying PowerShell interpreter, the newline acts as a command separator, leading to Remote Code Execution (RCE). This affects versions up to and including 1.1.2.
Affected products
- DSAI-Cline Cline-DSAI <= 1.1.2
Timeline
- 2026-03-27: disclosed: Vulnerability reported on GitHub issues
- 2026-03-31: advisory: CVE-2026-30312 published