CVE-2026-82536 Details

An auto-approve bypass vulnerability has been identified in Roo-Code versions through 3.54.0. This vulnerability arises in the shell command parsing logic, where the omission of the bash pipe operator '|&' from the command parser's operator token set allows attackers to execute denied shell commands. By crafting a command line that includes an allowlisted prefix followed by the stderr-redirecting pipe operator and a denied command, attackers can exploit this oversight. The parser inadvertently approves the entire command pipeline, while bash executes the denied component with the agent's auto-execute privileges on the developer's machine.

To address this vulnerability, add '|&' to the operator split list in 'src/shared/parse-command.ts' so that the pipeline is correctly divided into individual commands, each subject to the approval process. Alternatively, a more robust solution would be to derive the set of command separators from bash's grammar, ensuring that any newly introduced operator is properly handled without risking an unapproved command execution.