CVE-2026-76072: The Continue CLI applies an incomplete denylist as its only barrier to destructive shell commands when running unattende

The Continue CLI (a tool for running AI agents from the command line) uses an incomplete blocklist as its only protection against destructive shell commands when running unattended, meaning it tries to block dangerous commands by listing which ones are unsafe rather than allowing only safe ones. An attacker can bypass this protection through prompt injection (tricking the AI by hiding malicious instructions in content like web pages or files the AI reads), allowing them to delete a user's data by using unblocked commands like recursive deletion of certain directories or tools like shred and wipefs.