CVE-2026-109560
Continue CLI through 1.5.47 Bash Permission Rule Bypass via Command Chaining
- State
- Published
- Severity
- 7.7 High
- Published
- Oct 12, 2026
- Updated
- Oct 13, 2026
- Reserved
- Oct 12, 2026
Description
Continue CLI (@continuedev/cli) through 1.5.47 contains a permission bypass vulnerability that allows attackers to run unapproved commands by chaining them after allowed Bash prefix rules. Attackers can inject instructions into repository files or fetched pages so the agent appends commands after ;, && or | to execute code as the user.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 7.7 High | CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H | VulnCheck |
Weaknesses
- CWE-863 Incorrect Authorization
Affected Products
| Product | Versions |
|---|---|
continuecontinuedev |
|
References
- GitHub Issue #13288issue-tracking
- Vulnerable code in permissionChecker.tstechnical-description
- Vulnerable code in policyWriter.tstechnical-description
- https://github.com/continuedev/continueproduct
- VulnCheck Advisory: Continue CLI through 1.5.47 Bash Permission Rule Bypass via Command Chainingthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.