CVE-2026-109560
Description
A flaw was found in Continue CLI. A remote attacker can exploit a permission bypass vulnerability by injecting instructions into repository files or fetched web pages that cause the application to chain unauthorized commands after permitted command prefixes. A successful attack can result in arbitrary code execution under the privileges of the user running the application.
Statement
Red Hat rates this vulnerability as Important severity because, although an attacker can achieve arbitrary command execution within the victim's session, exploitation relies on user interaction to process hostile repositories or external content. Continue CLI is not included, packaged, or supported in Red Hat Enterprise Linux or any other Red Hat product offerings. Standard enterprise deployments are therefore not exposed to this issue unless users independently install and execute this third-party utility in their environments.
Understanding the Weakness (CWE)
Confidentiality,Integrity,Availability,Non-Repudiation
Technical Impact: Execute Unauthorized Code or Commands; DoS: Crash, Exit, or Restart; Read Files or Directories; Modify Files or Directories; Read Application Data; Modify Application Data; Hide Activities
Attackers could execute unauthorized operating system commands, which could then be used to disable the product, or read and modify data for which the attacker does not have permissions to access directly. Since the targeted application is directly executing the commands instead of the attacker, any malicious activities may appear to come from the application or the application's owner.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
