{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/tags/cli-security/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:continue:continue_cli:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-109560"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Continue CLI (\u003c= 1.5.47)"],"_cs_severities":["high"],"_cs_tags":["vulnerability","remote-code-execution","cli-security","supply-chain"],"_cs_type":"advisory","_cs_vendors":["Continue"],"content_html":"\u003cp\u003eContinue CLI (at continuedev/cli) through version 1.5.47 contains a high-severity permission bypass vulnerability (CVE-2026-109560). The vulnerability stems from improper validation of commands that the CLI tool is permitted to execute. An attacker can exploit this by injecting malicious content into repository files or web pages fetched by the CLI agent. When the agent processes these inputs, it fails to sanitize inputs effectively, allowing the injection of shell metacharacters such as ;, \u0026amp;\u0026amp;, or |. Consequently, an attacker can force the agent to append and execute arbitrary commands with the privileges of the user running the CLI tool. This vulnerability represents a significant risk to developers and automation environments utilizing the tool, as it permits unauthorized code execution via manipulated project context.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for arbitrary code execution in the context of the user running the Continue CLI tool. This can lead to local privilege escalation, exfiltration of sensitive source code or environment variables, and persistence within the development environment. The impact is elevated given that AI-assisted coding tools often have access to private repositories and API tokens.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade Continue CLI (@continuedev/cli) to a version beyond 1.5.47 immediately.\u003c/li\u003e\n\u003cli\u003eImplement restrictive least-privilege policies for accounts and CI/CD pipelines that execute AI coding agents.\u003c/li\u003e\n\u003cli\u003eAudit repository content and remote resources that the Continue CLI is configured to fetch for unexpected shell metacharacters.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-12T22:42:36Z","date_published":"2026-10-12T22:42:36Z","id":"https://feed.craftedsignal.io/briefs/2026-10-continue-cli-bypass/","summary":"Continue CLI versions up to 1.5.47 are vulnerable to a command injection flaw that allows attackers to execute arbitrary commands by chaining them after permitted shell commands.","title":"CVE-2026-109560: Permission Bypass in Continue CLI","url":"https://feed.craftedsignal.io/briefs/2026-10-continue-cli-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - Cli-Security","version":"https://jsonfeed.org/version/1.1"}