CVE-2026-82537 Details

An auto-approve bypass vulnerability has been identified in Roo-Code versions through 3.54.0. This vulnerability allows attackers to execute denied shell commands by exploiting a word-boundary mismatch in comment handling between the approval gate's shell parser and bash. When 'always approve execute' is enabled, the approval gate uses a third-party shell parser that misinterprets comments, allowing denied commands to be executed with the agent's auto-execute privileges on the developer's machine.

Users are advised not to rely on 'shell-quote' for comment tokenization, as its word-boundary rule differs from bash's. Instead, commands should be checked for comment tokens and re-tokenized according to bash's rules before being evaluated.