CVE-2026-110202

Roo Code through 3.54.0 contains a command approval bypass vulnerability in getCommandDecision() that allows attackers to auto-approve denied shell commands by prefixing them with a bare >& redirect. Attackers using indirect prompt injection can make the allowlist match a redirect target like echo while the shell runs the denied command on the developer machine.

• CWE-436

• https://github.com/7rah/oss-cve/blob/6adb836d24ca446fd168c3acdc4c170beb77fe0f/roocode-group14-redirect.mdExploit, Mitigation, Third Party Advisory
• https://github.com/RooCodeInc/Roo-Code/blob/v3.54.0/src/core/auto-approval/commands.ts#L265-L274Product
• https://www.vulncheck.com/advisories/roo-code-through-3.54.0-auto-approve-bypass-via-redirect-operator-strippingThird Party Advisory
• https://github.com/7rah/oss-cve/blob/6adb836d24ca446fd168c3acdc4c170beb77fe0f/roocode-group14-redirect.mdExploit, Mitigation, Third Party Advisory

Published

Oct 13, 2026

Last Modified

Oct 15, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-110179The affiliate-toolkit WordPress plugin before 3.8.9 does no…6.8
• CVE-2026-11018Insufficient policy enforcement in Actor in Google Chrome pr…6.5
• CVE-2026-11019Inappropriate implementation in Payments in Google Chrome on…6.5
• CVE-2026-110191The Product Delivery Date for WooCommerce WordPress plugin …2.7
• CVE-2026-1102GitLab has remediated an issue in GitLab CE/EE affecting all…7.5
• CVE-2026-11020Inappropriate implementation in Extensions in Google Chrome …6.5
• CVE-2026-110203Roo Code through 3.54.0 contains a command approval bypass v…8.8
• CVE-2026-110204Roo Code through 3.54.0 contains a command approval bypass v…8.8
• CVE-2026-110205Roo Code through 3.54.0 contains a command approval bypass v…8.8
• CVE-2026-110206Roo Code through 3.54.0 contains a command approval bypass v…8.8
• CVE-2026-110207Wukong AICRM through 20260610 contains a missing authorizati…8.8
• CVE-2026-110208Wukong AICRM through 20260610 contains a missing authorizati…7.1