continuedev

Products

ProductCVEsExploitedLatest
Continue4–Oct 26, 2026

Exploited and recent CVEs

  • CVE-2026-116109 Medium 6.3 continuedev Continue MCP Server Transport ConfigHandler.ts MCPManagerSingleton.setConnections os command injection 1.2%
  • CVE-2026-109560 High 7.5 Continue CLI through 1.5.47 Bash Permission Rule Bypass via Command Chaining 0.5%
  • CVE-2026-76072 High 7.4 Continue CLI through 1.5.47 Incomplete Destructive Command Denylist in Headless and Auto Mode 0.4%
  • CVE-2026-8770 Low 3.3 continuedev continue JSON-RPC Server lsTool.ts lsTool path traversal 0.3%