Cline AI Coding Agent Vulnerabilities Enable Prompt Injection, Code Execution, and Data Leakage

Cyberpress • November 19, 2025

Share: View original

Four vulnerabilities discovered during a brief audit of the popular VSCode extension can enable attackers to exfiltrate API keys.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Cline Bot AI Agent Exposed to Data Theft via Critical Vulnerabilities Mindgard has identified four critical security flaws in the Cline Bot AI coding agent, which could allow attackers to exploit prompt injection techniques for API key theft and remote code execution. Users of the Cline Bot AI are at risk due to these vulnerabilities. 7 sources 38

Extracted Entities

Attack Types (2)

Data Breach Prompt Injection

Companies (1)