Bash Permission Bypass in Continue CLI by ContinueDev

CVE-2026-109560

What is CVE-2026-109560?

Continue CLI versions up to 1.5.47 are susceptible to a permission bypass vulnerability allowing attackers to execute unauthorized commands through command chaining. By exploiting flaws in the parsing of Bash prefix rules, an attacker can inject commands in repository files or retrieved pages, enabling them to append and execute arbitrary code as if they were the legitimate user. This exploitation poses a significant security risk, emphasizing the need for immediate remediation measures.

References