CVE-2026-63108
Received Received - Intake

RCE via Command Injection in Roo Code

Publication date: 2026-07-20

Last updated on: 2026-07-20

Assigner: VulnCheck

Description
Roo Code through 3.54.0 contains a command injection vulnerability in the auto-approve execute feature that allows attackers to bypass allowlist/denylist enforcement by nesting command substitutions inside parameter expansion defaults. The command parser in parse-command.ts replaces parameter expansions with opaque placeholders before extracting command substitutions, causing the containsDangerousSubstitution guard to miss nested payloads, which are then auto-approved based on the outer allowlisted command prefix and executed by the shell via execa, enabling arbitrary command execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-20
Last Modified
2026-07-20
Generated
2026-07-21
AI Q&A
2026-07-20
EPSS Evaluated
N/A
NVD
CVE-2026-63108
EUVD
EUVD-2026-46065

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
roo_code roo_code to 3.54.0 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-184 The product implements a protection mechanism that relies on a list of inputs (or properties of inputs) that are not allowed by policy or otherwise require other action to neutralize before additional processing takes place, but the list is incomplete.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-63108 is a command injection vulnerability in Roo Code versions up to 3.54.0. It affects the auto-approve execute feature where attackers nest command substitutions inside parameter expansion defaults to bypass allowlist or denylist restrictions. The parser replaces parameter expansions with placeholders before checking for command substitutions, allowing malicious payloads to evade detection and execute arbitrary commands via the shell.

Detection Guidance

Check Roo Code version with 'roo-code --version' or inspect package.json for version 3.54.0 or earlier. Monitor logs for unexpected command execution patterns involving nested parameter expansions and command substitutions like ${x:-$(...)}.

Impact Analysis

This vulnerability allows attackers to execute arbitrary commands on your system without proper approval. If you use Roo Code with the auto-approve feature enabled, an attacker could trick the system into running malicious commands by hiding them inside parameter expansions. This could lead to unauthorized access, data theft, or system compromise depending on the executed commands.

Compliance Impact

This vulnerability could lead to unauthorized data access or exfiltration, violating GDPR's data protection requirements and HIPAA's safeguards for protected health information. Organizations using Roo Code may face compliance violations if attackers exploit this flaw to access sensitive data, potentially resulting in regulatory penalties and reputational damage.

Mitigation Strategies

Upgrade Roo Code to version 3.55.0 or later. Disable the auto-approve execute feature if not required. Review and tighten allowlist/denylist rules to block parameter expansions containing command substitutions.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-63108. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart