CVE-2026-116109
Received Received - Intake

Command Injection in Continue Dev 2.0.0

Publication date: 2026-10-26

Last updated on: 2026-10-26

Assigner: VulDB

Description
A vulnerability has been found in continuedev Continue 2.0.0. This vulnerability affects the function MCPManagerSingleton.setConnections of the file core/config/ConfigHandler.ts of the component MCP Server Transport. Such manipulation leads to os command injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-26
Last Modified
2026-10-26
Generated
2026-10-26
AI Q&A
2026-10-26
EPSS Evaluated
N/A
NVD
CVE-2026-116109
EUVD
EUVD-2026-109601

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
continuedev Continue 2.0.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-78 The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
CWE-77 The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an OS command injection flaw in continuedev Continue 2.0.0. It exists in the MCPManagerSingleton.setConnections function within core/config/ConfigHandler.ts. An attacker can remotely exploit this to execute arbitrary operating system commands on the affected system.

Detection Guidance

This vulnerability involves OS command injection in the MCPManagerSingleton.setConnections function of Continue 2.0.0. To detect it, inspect network traffic for suspicious commands sent to the MCP server transport. Check logs for unexpected system command executions originating from the application. Monitor for unusual child processes spawned by the Continue process.

Impact Analysis

If exploited, this vulnerability allows attackers to run unauthorized commands on your system. This could lead to data theft, system compromise, or further network infiltration. The attack is remote and does not require authentication.

Compliance Impact

This vulnerability could lead to unauthorized access and data breaches, violating GDPR and HIPAA requirements for data protection and security. Organizations using this software may face compliance violations and penalties.

Mitigation Strategies

Immediately update or patch the Continue 2.0.0 software to a version that fixes the os command injection vulnerability in MCPManagerSingleton.setConnections. If no patch is available, consider disabling the MCP Server Transport component or restricting network access to it.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-116109. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart