Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was identified in continuedev continue up to 1.2.22. This affects the function lsTool of the file core/tools/implementations/lsTool.ts of the component JSON-RPC Server. Such manipulation of the argument dirPath leads to path traversal. An attack has to be approached locally. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-8770 A vulnerability was identified in continuedev continue up to 1.2.22. This affects the function lsTool of the file core/tools/implementations/lsTool.ts of the component … https://www.cve.org/CVERecord?id=CVE-2026-8770
Post summary
A CVE-2026-8770 vulnerability was identified in the continuedev tool, affecting its lsTool function, but the post offers no evidence of exploitation or patching details.
CVE-2026-8770 Path Traversal in continuedev Continue Up to 1.2.22 JSON-RPC Server https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8770
Post summary
The post announces CVE-2026-8770 as a Path Traversal flaw in continuedev’s JSON‑RPC Server (v1.2.22 and earlier) but does not provide PoC, exploitation, or patch details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | continue | continue | - | visual_studio_code | - |