Continuedev vulnerabilities
We track 2 vulnerabilities in Continuedev products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 12, 2026.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Continuedev vulnerabilities
- 7.5 High severity
continue: Incorrect Authorization
Continue CLI (@continuedev/cli) through 1.5.47 contains a permission bypass vulnerability that allows attackers to run unapproved commands by chaining them after allowed Bash prefix rules. Attackers can inject instructions into repository files or fetched page
- 7.4 High severity
continue: Incomplete List of Disallowed Inputs
The Continue CLI applies an incomplete denylist as its only barrier to destructive shell commands when running unattended. In headless mode and auto mode the default policy in extensions/cli/src/permissions/defaultPolicies.ts grants the Bash tool the allow per