Incomplete Denylist in Continue CLI Affects Command Security

CVE-2026-76072

What is CVE-2026-76072?

The Continue CLI has been identified as having a major vulnerability due to an incomplete denylist that permits the execution of potentially destructive shell commands in unattended modes. The default configurations grant undue permissions to the Bash tool, allowing critical commands under conditions that can lead to significant data loss. Specifically, the harmful-path assessment does not account for essential directories like /home or /var, making recursive deletions possible. When executed in headless or auto modes, the parsing process can fail to adequately restrict commands due to the handling of environment variables, resulting in scenarios where users may inadvertently execute harmful commands. This poses a significant risk, especially as the agent may process external content, increasing the risk of accidental command execution that compromises user data.

References