Head to head
Cline vs GitHub Copilot
Comparing 12 documented Cline incidents against 6 for GitHub Copilot.
What these records show
Cline has the lower average severity among the incidents collected here (4.3 vs 7.3 for Cline and GitHub Copilot, from 12 and 6 incidents). These records can't establish which agent is safer: counts reflect how widely each is used and how often people report failures, not a failure rate.
| Metric | Cline | GitHub Copilot |
|---|---|---|
| Documented incidents | 12 | 6 |
| Average severity | 4.3 | 7.3 |
| Critical | 1 | 0 |
| High | 1 | 5 |
| Source checked | 10 | 6 |
Severity at a glance
Cline
4.3
medium
GitHub Copilot
7.3
high
Failure modes
ClineDistribution of failure modes across all documented incidents.
GitHub CopilotDistribution of failure modes across all documented incidents.
The incidents behind these numbers
Cline
9.0Clinejection: an AI issue-triage workflow enabled arbitrary code execution on the CI runner7.0Cline's run_commands mangled PowerShell/cmd quoting on a temp-folder cleanup, turning it into a drive-root `rmdir /s /q` that wiped ~1.5TB of a user's photos, videos, and documents (GitHub #14864)6.0Cline's hub daemon silently reverted workspace files to stale state, repeatedly erasing a gitignored .env.local and collapsing a node_modules folder from 588 entries to 2 (GitHub #14819)6.0Cline's tool-call JSON repair silently executed truncated write_file and terminal arguments as valid5.0Cline sessions marked "failed" kept burning tokens for 20+ hours, and FREE-labeled models billed credits anyway
GitHub Copilot
8.0GitHub Copilot CLI ran arbitrary attacker commands via a nested bare git repository abusing core.fsmonitor (CVE-2026-45033)8.0GitHub Copilot suggested 2,702 valid secrets — 33% of extracted keys were real, live credentials8.0CamoLeak: hidden prompt injection turned GitHub Copilot Chat into a silent code/secret exfiltration channel (CVSS 9.6)8.0Rule Files Backdoor: hidden Unicode in config files made Copilot and Cursor emit malicious code7.0Copilot CLI's checkpoint restore ran git clean -fd and destroyed 1GB of evaluation data the agent never touched