Cline: Vulnerable To Data Exfiltration And How To Protect Your Data
Brief
Cline is quite a popular AI coding agent, according to the product website it has 2+ million downloads and over 47k stars on GitHub.
Unfortunately, Cline is vulnerable to data exfiltration through the rendering of markdown images from untrusted domains in the chat box.
This allows an adversary to exfiltrate sensitive user information during a prompt injection attack by reading sensitive data (e. g. . env file) and appending its contents to the URL of an image.