CVE-2026-82536

Name of the Vulnerable Software and Affected Versions Roo-Code versions prior to 3.54.1

Description A flaw in the shell command parsing logic allows the bypass of auto-approve restrictions. The issue stems from the omission of the bash pipe operator from the command parser's operator token set. An attacker can execute denied shell commands by crafting a command line that starts with an allowlisted prefix followed by the stderr-redirecting pipe operator and the denied command. This causes the parser to approve the entire pipeline, while bash executes the restricted component using the agent's auto-execute privileges on the developer's machine.

Recommendations Update Roo-Code to version 3.54.1 or later.