CVE-2026-109560

HighCVSS 7.5

Published: 12/10/2026(UTC)Updated: 16/10/2026(UTC)Translated: 13/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

32th percentile - higher than 32% of all known CVEs

Summary

Continue CLI (@continuedev/cli) through 1.5.47 contains a permission bypass vulnerability that allows attackers to run unapproved commands by chaining them after allowed Bash prefix rules. Attackers can inject instructions into repository files or fetched pages so the agent appends commands after ;, && or | to execute code as the user.

Risk Assessment

The risk is unauthorized code execution in the user's context, potentially leading to system compromise or data breach.

Recommendation

It is recommended to update to a version newer than 1.5.47 immediately and restrict access to repositories and pages that may contain malicious instructions.

Other vulnerabilities in Continue CLI

CVE-2026-76072High
The Continue CLI in unattended mode (headless/auto) uses an incomplete denylist as its only barrier to destructive shell commands. It allows the Bash tool and blocks only certain paths, permitting recursive forced removal of directories like /home, /root, /var, /opt, or /srv. Additionally, due to variable parsing, the command rm -rf $HOME is not blocked, and other dangerous tools (find, shred, wipefs, truncate, pkexec) are not properly handled.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS