CVE-2026-109560 Details
Description
Continue CLI (@continuedev/cli) through 1.5.47 contains a permission bypass vulnerability that allows attackers to run unapproved commands by chaining them after allowed Bash prefix rules. Attackers can inject instructions into repository files or fetched pages so the agent appends commands after ;, && or | to execute code as the user.
A permission bypass vulnerability has been identified in Continue CLI (through version 1.5.47) that allows attackers to execute unapproved commands. This is achieved by chaining commands after allowed Bash prefix rules. The vulnerability arises because the permission checker matches static allow rules against the entire command string, including injected commands, and the 'user preference wins' policy overrides dynamic security evaluations.
Users are advised to update to a version of Continue CLI that addresses this vulnerability. Instructions for updating can be found in the Continue CLI repository on GitHub.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 12, 2026CISA-ADP
Assessed Oct 13, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/continuedev/continue/issues/13288 | CISA-ADP | ExploitIssue TrackingTechnical AnalysisVendor |
| https://github.com/continuedev/continue | [email protected] | ProductVendor |
| https://github.com/continuedev/continue/blob/d3f60ba9dd3fb5bfd3c91d6fbb41ce1aa768db45/extensions/cli/src/permissions/permissionChecker.ts#L162-L174 | [email protected] | Source CodeVendor |
| https://github.com/continuedev/continue/blob/d3f60ba9dd3fb5bfd3c91d6fbb41ce1aa768db45/extensions/cli/src/permissions/policyWriter.ts#L18-L31 | [email protected] | Source CodeVendor |
| https://github.com/continuedev/continue/issues/13288 | [email protected] | ExploitIssue TrackingTechnical AnalysisVendor |
| https://www.vulncheck.com/advisories/continue-cli-through-1.5.47-bash-permission-rule-bypass-via-command-chaining | [email protected] | AdvisoryBundle |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-863 | Incorrect Authorization | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Continue CLI | <= 1.5.47 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 13, 2026 | CVE Modified | CISA-ADP |
| Oct 12, 2026 | New CVE Received | [email protected] |