continuedev @continuedev/cli vulnerabilities

Latest continuedev @continuedev/cli CVEs

Newest publication first

1. CVE-2026-109560 Continue CLI through 1.5.47 Bash Permission Rule Bypass via Command Chaining

   Published 2026-10-12

   High·CVSS 7.7

   Continue CLI (@continuedev/cli) through 1.5.47 contains a permission bypass vulnerability that allows attackers to run unapproved commands by chaining them after allowed Bash prefix rules. Attackers can inject instructions into repository files or fetched pages so the agent appen...

2. CVE-2026-76072 Continue CLI through 1.5.47 Incomplete Destructive Command Denylist in Headless and Auto Mode

   Published 2026-08-24

   High·CVSS 8.3

   The Continue CLI applies an incomplete denylist as its only barrier to destructive shell commands when running unattended. In headless mode and auto mode the default policy in extensions/cli/src/permissions/defaultPolicies.ts grants the Bash tool the allow permission, and permiss...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.