Continue CLI through 1.5.47 Bash Permission Rule Bypass via Command Chaining

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-109560 · Microsoft / collected KEV context

cve-program · CVE-2026-109560

• https://github.com/continuedev/continue/issues/13288
• https://github.com/continuedev/continue/blob/d3f60ba9dd3fb5bfd3c91d6fbb41ce1aa768db45/extensions/cli/src/permissions/permissionChecker.ts#L162-L174
• https://github.com/continuedev/continue/blob/d3f60ba9dd3fb5bfd3c91d6fbb41ce1aa768db45/extensions/cli/src/permissions/policyWriter.ts#L18-L31
• https://github.com/continuedev/continue
• https://www.vulncheck.com/advisories/continue-cli-through-1.5.47-bash-permission-rule-bypass-via-command-chaining

No related operational record is retained in the current change model.