CVE-2026-8770

Name of the Vulnerable Software and Affected Versions continuedev continue versions prior to 1.2.23

Description A path traversal issue exists in the JSON-RPC Server component within the lsTool() function of the core/tools/implementations/lsTool.ts file. This occurs when the dirPath argument is manipulated, allowing a local attacker to access files or directories outside the intended folder.

Recommendations Update to a version later than 1.2.22. As a temporary workaround, restrict access to the lsTool() function to minimize the risk of exploitation.