CVE-2026-110203

Name of the Vulnerable Software and Affected Versions Roo Code versions prior to 3.54.1

Description A command approval bypass exists due to the abuse of quote-masking regex within the parseCommandLine() function. This allows attackers to use indirect prompt injection—a technique where malicious instructions are embedded in data processed by the system—using escaped or single-quoted double quotes. By hiding command separators behind allowlisted prefixes such as echo, unauthorized shell commands can be executed without user approval.

Recommendations Update Roo Code to version 3.54.1 or later. As a temporary mitigation, restrict the use of the parseCommandLine() function if possible.