CVE-2026-110202

Name of the Vulnerable Software and Affected Versions Roo Code versions prior to 3.54.1

Description A command approval bypass exists in the getCommandDecision() function. This issue allows attackers to auto-approve shell commands that should be denied by prefixing them with a bare >& redirect. By utilizing indirect prompt injection, an attacker can manipulate the allowlist to match a redirect target, such as echo, while the shell executes the denied command on the developer machine.

Recommendations Update to version 3.54.1 or later. As a temporary workaround, restrict the use of the getCommandDecision() function to minimize the risk of exploitation.