CVE-2026-82537

Name of the Vulnerable Software and Affected Versions Roo-Code versions prior to 3.54.1

Description A word-boundary mismatch in comment handling between the approval gate's shell parser and bash allows the bypass of auto-approve restrictions. An attacker can execute denied shell commands by crafting a command string where an allowlisted word is immediately followed by a hash character, a separator, and the denied command. This causes the approval gate to permit the request while bash executes the restricted command using the agent's auto-execute privileges on the developer's machine.

Recommendations Update Roo-Code to version 3.54.1 or later.