CVE-2026-110205

Name of the Vulnerable Software and Affected Versions Roo Code versions prior to 3.54.1

Description A command approval bypass exists in the parseCommandLine() function. The issue occurs when command substitutions are placed adjacent to * or ? glob characters, causing them to be discarded during parsing. An attacker can leverage indirect prompt injection to craft commands, such as echo *$(...), that appear to match allowlisted prefixes. This allows the execution of denied commands without user approval when the auto-approval feature is enabled.

Recommendations Update Roo Code to version 3.54.1 or later. As a temporary mitigation, disable the auto-approval feature to ensure all commands require manual user confirmation.