CVE-2026-116109: continuedev Continue MCP Server Transport ConfigHandler.ts MCPManagerSingleton.setConnections os command injection
A vulnerability has been found in continuedev Continue 2.0.0. This vulnerability affects the function MCPManagerSingleton.setConnections of the file core/config/ConfigHandler.ts of the component MCP Server Transport. Such manipulation leads to os command injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Does exploitation require authentication or local access?
No privileges are required, and the attack can be executed remotely. However, user interaction is required according to the CVSS vector.
Which deployments should be treated as affected?
The disclosed affected version is continuedev Continue 2.0.0, specifically where the MCP Server Transport component uses MCPManagerSingleton.setConnections in core/config/ConfigHandler.ts. The provided information does not establish whether other versions are affected.
How urgent is remediation?
The issue is rated medium severity with a CVSS score of 6.3, but a public exploit has been disclosed and may be used. Prioritize review of remotely reachable deployments of the affected version.