Skip to content
OpenAdvisories

Vendor

continuedev

4 known vulnerabilities.

Products

continue 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-109560

    Continue CLI through 1.5.47 Bash Permission Rule Bypass via Command Chaining

    Continue CLI (@continuedev/cli) through 1.5.47 contains a permission bypass vulnerability that allows attackers to run unapproved commands by chaining them after allowed Bash prefix rules. Attackers can inject instructions into repository files or fetched pag…

    continuedev continue
  • High 7.4
    CVE-2026-76072

    Continue CLI through 1.5.47 Incomplete Destructive Command Denylist in Headless and Auto Mode

    The Continue CLI applies an incomplete denylist as its only barrier to destructive shell commands when running unattended. In headless mode and auto mode the default policy in extensions/cli/src/permissions/defaultPolicies.ts grants the Bash tool the allow pe…

    continuedev continue