Advisories · Technology

Continue.

Every CVE that names Continue among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-116109 CVE record

CVSS 5.3 Medium

continuedev Continue MCP Server Transport ConfigHandler.ts MCPManagerSingleton.setConnections os command injection
- Continue
- Command injection
Not analysed yet 26 Oct 2026
CVE-2026-109560 CVE record

CVSS 7.7 High

Continue CLI through 1.5.47 Bash Permission Rule Bypass via Command Chaining
- continue
- Broken access control
Not analysed yet 12 Oct 2026
CVE-2026-76072 CVE record

CVSS 8.3 High

Continue CLI through 1.5.47 Incomplete Destructive Command Denylist in Headless and Auto Mode
- continue
- CWE-184
Not analysed yet 24 Aug 2026
CVE-2026-8770 CVE record

CVSS 4.8 Medium

continuedev continue JSON-RPC Server lsTool.ts lsTool path traversal
- continue
- Path traversal
Not analysed yet 17 May 2026