Continue CLI (<= 1.5.47) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/continue-cli--1.5.47/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 12 Oct 2026 22:42:36 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgCVE-2026-109560: Permission Bypass in Continue CLIhttps://feed.craftedsignal.io/briefs/2026-10-continue-cli-bypass/Mon, 12 Oct 2026 22:42:36 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-continue-cli-bypass/Continue CLI versions up to 1.5.47 are vulnerable to a command injection flaw that allows attackers to execute arbitrary commands by chaining them after permitted shell commands.Continue CLI (at continuedev/cli) through version 1.5.47 contains a high-severity permission bypass vulnerability (CVE-2026-109560). The vulnerability stems from improper validation of commands that the CLI tool is permitted to execute. An attacker can exploit this by injecting malicious content into repository files or web pages fetched by the CLI agent. When the agent processes these inputs, it fails to sanitize inputs effectively, allowing the injection of shell metacharacters such as ;, &&, or |. Consequently, an attacker can force the agent to append and execute arbitrary commands with the privileges of the user running the CLI tool. This vulnerability represents a significant risk to developers and automation environments utilizing the tool, as it permits unauthorized code execution via manipulated project context.

Impact

Successful exploitation allows for arbitrary code execution in the context of the user running the Continue CLI tool. This can lead to local privilege escalation, exfiltration of sensitive source code or environment variables, and persistence within the development environment. The impact is elevated given that AI-assisted coding tools often have access to private repositories and API tokens.

Recommendation

  • Upgrade Continue CLI (@continuedev/cli) to a version beyond 1.5.47 immediately.
  • Implement restrictive least-privilege policies for accounts and CI/CD pipelines that execute AI coding agents.
  • Audit repository content and remote resources that the Continue CLI is configured to fetch for unexpected shell metacharacters.
]]>highadvisoryvulnerabilityremote-code-executioncli-securitysupply-chain