Is CVE-2026-109560 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-109560?

CVE-2026-109560 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-109560

Description

Continue CLI (@continuedev/cli) through 1.5.47 contains a permission bypass vulnerability that allows attackers to run unapproved commands by chaining them after allowed Bash prefix rules. Attackers can inject instructions into repository files or fetched pages so the agent appends commands after ;, && or | to execute code as the user.