Roo Code Command Approval Bypass via Quote-Masking

Executive Summary

CVE-2026-110203 is a command approval bypass in Roo Code through version 3.54.0. It allows attackers to execute denied shell commands without user approval by exploiting a flaw in the parseCommandLine() function. The vulnerability involves quote-masking regex desynchronization, where escaped or single-quoted double quotes hide command separators behind allowlisted prefixes like echo, tricking the system into auto-approving malicious commands.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, inspect Roo Code installations for version 3.54.0 or earlier. Check parseCommandLine() or parse-command.ts for improper handling of quoted strings and command separators. Look for regex patterns like /"[^"]*"/ that fail to account for bash quoting rules. Monitor for unexpected command execution logs or auto-approved commands that bypass allowlists.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability enables attackers to execute arbitrary shell commands on systems running vulnerable Roo Code versions without user approval. It can lead to unauthorized file access, data exfiltration, system compromise, or further lateral movement within a network. The impact is severe due to the ability to bypass security controls and execute commands silently.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to non-compliance with GDPR, HIPAA, and other regulations by enabling unauthorized data access, exfiltration, or system manipulation. It undermines security controls required for compliance, potentially resulting in data breaches, unauthorized processing, or loss of audit integrity. Organizations using vulnerable versions may face regulatory penalties.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately upgrade Roo Code to a patched version if available. If not, disable auto-approve command execution features. Implement strict input validation for shell commands, rejecting any input containing escaped quotes, ANSI-C quotes, or command separators. Use a proper shell lexer to track quote state accurately. Require explicit user approval for all commands.

Useful 0 Not Useful 0