Continue CVE-2026-8770

No vendor-released patch identified at time of analysis despite early disclosure attempts. The vendor (continuedev) was notified but did not respond, leaving patch availability uncertain. Users should monitor the Continue GitHub repository (https://github.com/continuedev/continue) for security updates beyond version 1.2.22. As compensating controls: restrict local access to systems running Continue to trusted users only, as exploitation requires authenticated local access; run Continue processes with minimal filesystem permissions using principle of least privilege to limit traversal scope; implement mandatory access control (MAC) or containerization (Docker, Podman) to isolate Continue's file access to specific directories, though this may impact legitimate functionality if Continue requires broad filesystem access for code analysis; audit local user accounts on developer workstations running Continue and remove unnecessary privileges. Monitor filesystem access logs for unusual directory traversal patterns in Continue process activity. Reference exploit details at https://gist.github.com/YLChen-007/da04e032993a4b2324df915f9ecf9831 and VulDB entries https://vuldb.com/vuln/364395 for technical indicators to detect exploitation attempts.