CVE-2026-110206

Summary

Roo Code allows attackers to bypass command approval by injecting command substitutions that execute arbitrary shell commands without user approval. This vulnerability enables remote code execution through indirect prompt injection.

Exploitability

Exploitation is relatively straightforward requiring only a single malicious command injection like $(echo touch /tmp/x) that passes the echo allowlist check, with no additional prerequisites needed.

Blast radius

The impact could be significant across all systems running Roo Code 3.54.0 or earlier, potentially allowing full system compromise through arbitrary command execution.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Roo Code 3.55.0 or later to address this command approval bypass vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.