CVE-2026-110204

Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to run denied shell commands because parseCommandLine() treats ${ command; } substitutions as parameter expansions. Attackers using indirect prompt injection can embed denied commands inside an allowlisted command like echo to execute them without user approval on bash 5.3+ or ksh93.

• CWE-436

• https://github.com/7rah/oss-cve/blob/6adb836d24ca446fd168c3acdc4c170beb77fe0f/roocode-group03-funsub.mdExploit, Mitigation, Third Party Advisory
• https://github.com/RooCodeInc/Roo-Code/blob/v3.54.0/src/shared/parse-command.ts#L74-L79Product
• https://www.vulncheck.com/advisories/roo-code-through-3.54.0-auto-approve-bypass-via-funsub-command-substitutionThird Party Advisory
• https://github.com/7rah/oss-cve/blob/6adb836d24ca446fd168c3acdc4c170beb77fe0f/roocode-group03-funsub.mdExploit, Mitigation, Third Party Advisory

Published

Oct 13, 2026

Last Modified

Oct 15, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-11019Inappropriate implementation in Payments in Google Chrome on…6.5
• CVE-2026-110191The Product Delivery Date for WooCommerce WordPress plugin …2.7
• CVE-2026-1102GitLab has remediated an issue in GitLab CE/EE affecting all…7.5
• CVE-2026-11020Inappropriate implementation in Extensions in Google Chrome …6.5
• CVE-2026-110202Roo Code through 3.54.0 contains a command approval bypass v…8.8
• CVE-2026-110203Roo Code through 3.54.0 contains a command approval bypass v…8.8
• CVE-2026-110205Roo Code through 3.54.0 contains a command approval bypass v…8.8
• CVE-2026-110206Roo Code through 3.54.0 contains a command approval bypass v…8.8
• CVE-2026-110207Wukong AICRM through 20260610 contains a missing authorizati…8.8
• CVE-2026-110208Wukong AICRM through 20260610 contains a missing authorizati…7.1
• CVE-2026-110209Stonewuu ai-fusion-video through 1.2.0 contains a missing au…6.5
• CVE-2026-11021Insufficient validation of untrusted input in GPU in Google …9.6