CVE-2026-110206

Name of the Vulnerable Software and Affected Versions Roo Code versions prior to 3.54.1

Description A command approval bypass exists in the parseCommandLine() function. This issue allows attackers to auto-approve arbitrary shell commands by placing a command substitution in the command position. By utilizing indirect prompt injection, an attacker can submit commands such as $(echo touch /tmp/x) that bypass the echo allowlist check, leading the shell to execute the output without requiring user approval.

Recommendations Update Roo Code to version 3.54.1 or later. As a temporary workaround, restrict the use of the parseCommandLine() function to minimize the risk of exploitation.