All 4 CVE vulnerabilities found in continue, with AI-generated Chinese analysis, references, and POCs.
Vendor: continuedev
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-116109 | continuedev Continue MCP Server Transport ConfigHandler.ts MCPManagerSingleton.setConnections os command injection CWE-78 | 6.3 | Medium | 2026-10-26 |
| CVE-2026-109560 | Continue CLI through 1.5.47 Bash Permission Rule Bypass via Command Chaining CWE-863 | 7.5 | High | 2026-10-12 |
| CVE-2026-76072 | Continue CLI through 1.5.47 Incomplete Destructive Command Denylist in Headless and Auto Mode CWE-184 | 7.4 | High | 2026-08-24 |
| CVE-2026-8770 | continuedev continue JSON-RPC Server lsTool.ts lsTool path traversal CWE-22 | 3.3 | Low | 2026-05-17 |
All 4 known CVE vulnerabilities affecting continue with full Chinese analysis, references, and POCs where available.