Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2026-8770

continuedev continue JSON-RPC Server lsTool.ts lsTool path traversal

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A vulnerability was identified in continuedev continue up to 1.2.22. This affects the function lsTool of the file core/tools/implementations/lsTool.ts of the component JSON-RPC Server. Such manipulation of the argument dirPath leads to path traversal. An attack has to be approached locally. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

continuedev continue

  • 1.2.0affected
  • 1.2.1affected
  • 1.2.2affected
  • 1.2.3affected
  • 1.2.4affected
  • 1.2.5affected
  • 1.2.6affected
  • 1.2.7affected
  • 1.2.8affected
  • 1.2.9affected
  • 1.2.10affected
  • 1.2.11affected
  • 1.2.12affected
  • 1.2.13affected
  • 1.2.14affected
  • 1.2.15affected
  • 1.2.16affected
  • 1.2.17affected
  • 1.2.18affected
  • 1.2.19affected
  • 1.2.20affected
  • 1.2.21affected
  • 1.2.22affected

References