High severity · published Oct 12, 2026
CVE-2026-109560
Continue CLI through 1.5.47 Bash Permission Rule Bypass via Command Chaining
7.5
CVSS
0.5%
EPSS
No
On KEV
Description
Continue CLI (@continuedev/cli) through 1.5.47 contains a permission bypass vulnerability that allows attackers to run unapproved commands by chaining them after allowed Bash prefix rules. Attackers can inject instructions into repository files or fetched pages so the agent appends commands after ;, && or | to execute code as the user.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 43% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CO
continue · continuedev
through 1.5.47 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-109560
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-109560
issue-tracking
https://github.com/continuedev/continue/issues/13288
technical-description
https://github.com/continuedev/continue/blob/d3f60ba9dd3fb5bfd3c91d6fbb41ce1aa768db45/extensions/cli/src/permissions/permissionChecker.ts#L162-L174
technical-description
https://github.com/continuedev/continue/blob/d3f60ba9dd3fb5bfd3c91d6fbb41ce1aa768db45/extensions/cli/src/permissions/policyWriter.ts#L18-L31
product
https://github.com/continuedev/continue
third-party-advisory
https://www.vulncheck.com/advisories/continue-cli-through-1.5.47-bash-permission-rule-bypass-via-command-chaining
More from continue
7.4
CVE-2026-76072
Continue CLI through 1.5.47 Incomplete Destructive Command Denylist in Headless and Auto Mode
3.3
CVE-2026-8770
continuedev continue JSON-RPC Server lsTool.ts lsTool path traversal