CVE-2026-110204

Summary

Roo Code 3.54.0 contains a command approval bypass vulnerability where parseCommandLine() incorrectly treats ${ command; } substitutions as parameter expansions instead of actual commands, allowing attackers to execute denied shell commands through indirect prompt injection. This affects bash 5.3+ and ksh93 shells.

Exploitability

Exploitation is moderately difficult requiring indirect prompt injection to embed denied commands within allowlisted commands like echo, but the vulnerability is triggerable with user interaction via a web interface.

Blast radius

The vulnerability could allow attackers to execute arbitrary shell commands on affected systems with high privilege, potentially leading to full system compromise if the application runs with elevated permissions.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Roo Code 3.55.0 or later to address the command approval bypass vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.