Vulnerability · Published Oct 12, 2026 · Assigned by VulnCheck
CVE-2026-109560Continue CLI through 1.5.47 Bash Permission Rule Bypass via Command Chaining
High 7.5
In plain English
A high-severity incorrect authorization in continue from continuedev. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 43% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.5%top 56.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Continue CLI (@continuedev/cli) through 1.5.47 contains a permission bypass vulnerability that allows attackers to run unapproved commands by chaining them after allowed Bash prefix rules. Attackers can inject instructions into repository files or fetched pages so the agent appends commands after ;, && or | to execute code as the user.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| continuedev | continue | 0 – through 1.5.47 |
Weakness: CWE-863 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
References
- GitHub Issue #13288 issue-tracking
- Vulnerable code in permissionChecker.ts technical-description
- Vulnerable code in policyWriter.ts technical-description
- https://github.com/continuedev/continue product
- VulnCheck Advisory: Continue CLI through 1.5.47 Bash Permission Rule Bypass via Command Chaining third-party-advisory