Tools AI Risk Radar ai-incident-0216
Incident record
Continue CLI command chains can bypass permission rules
- Severity
- High
- Status
- Research
- Type
- Infra Vuln
- Target
- Continue CLI through 1.5.47
- Actor
- researcher
- CVE
- CVE-2026-109560
What happened
The researcher reports a bypass when a user has already allowed a shell-command prefix. An attacker can append a chained command that runs under that existing permission.
The original issue was opened on 17 September; the CVE was published on 12 October. The CNA gives CVSS 3.1 score 7.5. The public issue remained open on 13 October, and a released fix was unconfirmed.
Sources
- Original advisory or disclosuregithub.com/continuedev/continue/issues/13288
- CVE recordcveawg.mitre.org/api/cve/CVE-2026-109560
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 13 October 2026