Patch Forecast
Amber warning
Patch this week.

CVE-2026-110204

Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to…

Risk score
71/100
CVSS
8.8 v3.1
Exploit chance (30 days)
0.5%
Published
13 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is
Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to run denied shell commands because parseCommandLine() treats ${ command; } substitutions as parameter expansions. Attackers using indirect prompt injection can embed denied commands inside an allowlisted command like echo …
Affected
Roocode Roo Code
Fix
Apply the vendor's security update; see the linked advisory.
Exploitation
Public proof of concept

Story map

Story map: Roocode Roo CodeTHE FLAWSTHE FIXCVE-2026-110204Roo Code through 3.54.0contains a command approvalbypass vulnerability that…CVSS 8.8 · EPSS 1%CVE-2026-110203Roo Code through 3.54.0contains a command approvalbypass vulnerability that…CVSS 8.8 · EPSS 0%CVE-2026-110205Roo Code through 3.54.0contains a command approvalbypass vulnerability in…CVSS 8.8 · EPSS 0%CVE-2026-110206Roo Code through 3.54.0contains a command approvalbypass vulnerability in…CVSS 8.8 · EPSS 0%FixApply the vendor's securityupdate; see the linked advisory.Who is exposedRoocode Roo CodeAMBER · PATCH THIS WEEKRoocode Roo CodeRoo Code through 3.54.0contains a command approvalbypass vulnerability that allowsattackers to run denied shellcommands becauseparseCommandLine() treats ${command; } substitutions as…Where it standsPublic proof of conceptCONNECTS TOSame weaknessCWE-436 (CWE-436)19 other warnings in 30 days →Same productEarlier Roocode Roo Code warnings1 in the last 90 days →
Story map: the flaws, the fix, how it unfolded and what it connects to. Boxes link to the record or article.

At a glance

Roocode Roo Code: Amber, patch this week. Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to run denied shell commands because parseCommandLine() treats ${ command; } substitutions as parameter expansions. Attackers using indirect prompt injection can embed denied commands inside an allowlisted command like echo …

The flaws

  • CVE-2026-110204: Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to… (CVSS 8.8 · EPSS 1%)
  • CVE-2026-110203: Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to… (CVSS 8.8 · EPSS 0%)
  • CVE-2026-110205: Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine() that… (CVSS 8.8 · EPSS 0%)
  • CVE-2026-110206: Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine() that… (CVSS 8.8 · EPSS 0%)

The fix

Fix: Apply the vendor's security update; see the linked advisory.

Who is exposed: Roocode Roo Code

Where it stands

  • Public proof of concept

Connects to

Why it is Amber

  • CVSS 8.8 high
  • Public exploit or proof of concept referenced
  • Remotely exploitable without logging in

References

Original description

Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to run denied shell commands because parseCommandLine() treats ${ command; } substitutions as parameter expansions. Attackers using indirect prompt injection can embed denied commands inside an allowlisted command like echo to execute them without user approval on bash 5.3+ or ksh93.

Last activity 13 Oct 2026. Patch Forecast updates every hour.