Continue vulnerabilities

2 known vulnerabilities in Continue from Continuedev. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  continue: Incorrect Authorization

  CVE-2026-109560Oct 12, 2026Continuedev

  Continue CLI (@continuedev/cli) through 1.5.47 contains a permission bypass vulnerability that allows attackers to run unapproved commands by chaining them after allowed Bash prefix rules. Attackers can inject instructions into repository files or fetched page

• 7.4 High severity

  continue: Incomplete List of Disallowed Inputs

  CVE-2026-76072Aug 24, 2026Continuedev

  The Continue CLI applies an incomplete denylist as its only barrier to destructive shell commands when running unattended. In headless mode and auto mode the default policy in extensions/cli/src/permissions/defaultPolicies.ts grants the Bash tool the allow per