01EntryItem

Archive

1. NewsWatch25 Sept 2026

   Cline: Cross-Origin WebSocket Hijacking in Cline Hub Dashboard (`/browser` endpoint)

   CVE-2026-59723: cross-origin WebSocket hijacking in Cline Hub Dashboard's `/browser` endpoint — an attacker's page can take over the socket. Anyone exposing the dashboard beyond localhost should patch now.

   SourceDetailsClawBytes post