{"data":{"id":"cf0c680d-8e1a-4d01-b4d2-adfd34dc12a0","title":"CVE-2026-110204: Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to run denied shell…","summary":"Roo Code through 3.54.0 has a command approval bypass. Its parseCommandLine() function treats ${ command; } substitutions as parameter expansions, so attackers using indirect prompt injection can hide denied shell commands inside an allowlisted command such as echo. The commands run without user approval on bash 5.3+ or ksh93.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-110204","publishedAt":"2026-10-13T19:18:43.857Z","cveId":"CVE-2026-110204","cweIds":["CWE-436"],"cvssScore":"8.8","cvssSeverity":"high","severity":"high","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Roo Code"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Roo Code command approval bypass through parseCommandLine substitutions","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0,"epssCheckedAt":"2026-10-14T06:09:04.547Z","kevDateAdded":null,"advisoryAliases":["GHSA-mfc9-vhw7-f5w9"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-14T06:09:10.166Z","patchAvailable":null,"disclosureDate":"2026-10-13T19:18:43.857Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0051"]}}