DSAI‑Cline’s auto‑approval module contains a critical OS command injection flaw that disables its whitelist security. The module parses command strings and blocks dangerous operators such as ";", "&&", "||", "|", and command substitution, but fails to sanitize literal newline characters. An attacker can craft a payload that inserts a newline between a whitelisted command and malicious code, causing the underlying PowerShell interpreter to treat the newline as a command separator and execute both commands. This results in Remote Code Execution without any user interaction.

The vulnerable component is the auto‑approval function of the DSAI‑Cline product. No specific version numbers are listed, so any installation that includes this component may be exposed.

The vulnerability has a CVSS score of 9.8, indicating a high severity impact. The EPSS score of 2% suggests a low probability of exploitation in the current threat landscape, and it is not yet listed in the CISA KEV catalog. Exploitation requires supplying a crafted command string to the auto‑approval process. Based on the description, it is inferred that the attacker needs to deliver a command string to the auto‑approval module through a user‑controllable input such as an API endpoint or script, though the exact interface is not detailed. The system’s automatic approval leads to Remote Code Execution without user interaction.