CVE-2026-110204 — Roo-Code through 3.54.0 Auto-Approve Bypass via Funsub Command Substitution
Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to run denied shell commands because parseCommandLine() treats ${ command; } subst…
Published: 2026-10-13 · CVSS: 7.7 · CVSS 4.0
Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to run denied shell commands because parseCommandLine() treats ${ command; } substitutions as parameter expansions. Attackers using indirect prompt injection can embed denied commands inside an allowlisted command like echo to execute them without user approval on bash 5.3+ or ksh93.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7