continuedev continue vulnerabilities

Latest continuedev continue CVEs

Newest publication first

1. CVE-2026-8770 continuedev continue JSON-RPC Server lsTool.ts lsTool path traversal

   Published 2026-05-17

   Medium·CVSS 4.8

   A vulnerability was identified in continuedev continue up to 1.2.22. This affects the function lsTool of the file core/tools/implementations/lsTool.ts of the component JSON-RPC Server. Such manipulation of the argument dirPath leads to path traversal. An attack has to be approach...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.