CVE-2026-110204

Name of the Vulnerable Software and Affected Versions Roo Code versions prior to 3.54.1

Description A command approval bypass exists where the parseCommandLine() function incorrectly treats ${ command; } substitutions as parameter expansions. This allows attackers to use indirect prompt injection to embed denied commands within an allowlisted command, such as echo, enabling the execution of unauthorized shell commands without user approval on bash 5.3+ or ksh93.

Recommendations Update Roo Code to version 3.54.1 or later. As a temporary mitigation, restrict the use of the parseCommandLine() function or avoid executing commands on bash 5.3+ or ksh93 environments until the update is applied.