Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

25 records

Vendor: RooCodeInc Clear all filters
TI-2026-73423 CVE-2026-110206 · GHSA-r2h8-r3xm-p2rm

Command substitution bypasses command approval in Roo Code

Priority LOW 36

Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine() that allows attackers to auto-approve arbitrary shell commands by placing a command substitution in command position.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00506 Published 2026-10-13 No fix listed CWE-436
TI-2026-73422 CVE-2026-110205 · GHSA-66pw-2qq8-258w

Auto-approve bypass in Roo-Code via glob and command substitution

Priority HIGH 69

Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine() that discards command substitutions placed next to * or ? glob characters.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00506 Published 2026-10-13 No fix listed CWE-184
TI-2026-73421 CVE-2026-110204 · GHSA-mfc9-vhw7-f5w9

Auto-approve bypass in Roo-Code runs denied shell commands

Priority HIGH 69

Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to run denied shell commands because parseCommandLine() treats ${ command; } substitutions as parameter expansions.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00506 Published 2026-10-13 No fix listed CWE-436
TI-2026-73420 CVE-2026-110203 · GHSA-c42p-7mq6-q83w

Roo Code auto-approve bypass lets attackers run denied shell commands

Priority LOW 36

Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to auto-approve denied shell commands by abusing quote-masking regex in parseCommandLine().

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00506 Published 2026-10-13 No fix listed CWE-436
TI-2026-73419 CVE-2026-110202 · GHSA-v45q-xfmj-r4wr

Auto-approve bypass in Roo-Code via redirect operator stripping

Priority HIGH 69

Roo Code through 3.54.0 contains a command approval bypass vulnerability in getCommandDecision() that allows attackers to auto-approve denied shell commands by prefixing them with a bare >& redirect.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00403 Published 2026-10-13 No fix listed CWE-436
TI-2026-56894 CVE-2026-82537 · GHSA-8fwh-72qq-gr52

Roo-Code 3.54.0 Auto-Approve Bypass via Shell Parser Word-Boundary Mismatch

Priority HIGH 69

Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability that allows attackers to execute denied shell commands by exploiting a word-boundary mismatch in comment handling between the approval gate's shell pa…

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00469 Published 2026-09-08 No fix listed CWE-436
TI-2026-56893 CVE-2026-82536 · GHSA-cvxc-67pr-wffj

Roo-Code 3.54.0 Auto-Approve Bypass via Shell Command Pipe Operator

Priority LOW 36

Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability in the shell command parsing logic that allows attackers to execute denied shell commands by exploiting the omission of the bash pipe operator from th…

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00521 Published 2026-09-08 No fix listed CWE-184
TI-2026-45057 CVE-2026-63108 · GHSA-5xxh-cfjg-qm65

Roo Code 3.54.0 Command Injection via Parameter Expansion Parsing

Priority HIGH 69

Roo Code through 3.54.0 contains a command injection vulnerability in the auto-approve execute feature that allows attackers to bypass allowlist/denylist enforcement by nesting command substitutions inside parameter expa…

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.01768 Published 2026-07-20 No fix listed CWE-184