Cline Bot AI Coding Agent Arbitrary Code Execution via Prompt Injection and TOCTOU Script Invocation

Affected Vendor(s)

Affected Product(s)

Summary

Cline is vulnerable to prompt injection when analyzing source code files. This prompt injection can be used to execute arbitrary code by breaking the model’s ability to analyze an entire potential execution chain for safety.

Timeline

24th August, 2025 Identified flaws
27th August 2025 Reported to vendor
31st October 2025 Product re-tested
18th November 2025 Findings published

Credit

Blog Post

References

Learn how Mindgard can help you navigate AI Security

Take the first step towards securing your AI. Book a demo now and we'll reach out to you.