CVE-2026-110203

Summary

Roo Code v3.54.0 contains a command approval bypass vulnerability where attackers can auto-approve denied shell commands by exploiting quote-masking regex in parseCommandLine(). This allows execution of arbitrary commands without user approval.

Exploitability

Exploitation is moderately difficult requiring attackers to craft specially escaped command sequences with indirect prompt injection, but the vulnerability is remotely exploitable with no authentication required.

Blast radius

The vulnerability could allow attackers to execute arbitrary shell commands on affected systems, potentially leading to full system compromise and data exfiltration across all installations running version 3.54.0 or earlier.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Roo Code 3.55.0 or later to remediate this command approval bypass vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.