CVE-2026-110205

Summary

Roo Code allows attackers to bypass command approval by crafting malicious commands that use glob characters like * or ? next to command substitutions, enabling execution of denied commands when auto-approval is enabled.

Exploitability

Moderately difficult to exploit as it requires indirect prompt injection to craft commands like echo *$(...) that match allowlisted prefixes, but the vulnerability is highly impactful once achieved.

Blast radius

High impact across all systems using Roo Code with auto-approval enabled, potentially allowing full command execution and system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to roocode version 3.54.1 or later to fix the command approval bypass vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.