CVE-2026-110204

Analyzed Analyzed - Analysis Complete

Command Approval Bypass in Roo Code

Publication date: 2026-10-13

Last updated on: 2026-10-15

Assigner: VulnCheck

Description

Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to run denied shell commands because parseCommandLine() treats ${ command; } substitutions as parameter expansions. Attackers using indirect prompt injection can embed denied commands inside an allowlisted command like echo to execute them without user approval on bash 5.3+ or ksh93.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-13

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-10-14

EPSS Evaluated

2026-10-18

NVD

CVE-2026-110204

EUVD

EUVD-2026-99245

Affected Vendors & Products

Vendor	Product	Version / Range
roocode	roo_code	to 3.54.0 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-436	Product A handles inputs or steps differently than Product B, which causes A to perform incorrect actions based on its perception of B's state.

Attack-Flow Graph

Executive Summary

This vulnerability in Roo Code through version 3.54.0 allows attackers to bypass command approval mechanisms. The parseCommandLine() function incorrectly treats ${ command; } substitutions as parameter expansions instead of command executions. Attackers can embed denied shell commands within allowlisted commands like echo and execute them without user approval on systems running bash 5.3+ or ksh93.

Detection Guidance

Check if Roo Code version 3.54.0 or earlier is installed by running: roo-code --version. Inspect command logs for suspicious patterns like ${ command; } substitutions in shell commands. Monitor for unauthorized file creation or execution in /tmp or other directories.

Impact Analysis

If exploited, this vulnerability could allow unauthorized execution of shell commands on your system. Attackers could run malicious commands even if they are supposed to be blocked by security controls. This could lead to data theft, system compromise, or further network infiltration depending on the executed commands.

Compliance Impact

This vulnerability could lead to unauthorized data access or modification, violating compliance requirements for GDPR (data protection) and HIPAA (health information security). Organizations using Roo Code may fail to meet security control standards, risking legal penalties and reputational damage.

Mitigation Strategies

Upgrade Roo Code to a patched version if available. Disable the 'always approve execute' feature if enabled. Review and update allowlist/denylist rules to explicitly block ${...} patterns. Restrict shell access for Roo Code to minimize impact.

Hi! I’m here to help you understand CVE-2026-110204. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70