CyberRota Analysis
AI-GeneratedThe vulnerability exists in Roo Code versions up to 3.54.0, where a command injection flaw in the auto-approve execute feature allows attackers to bypass security controls by nesting command substitutions within parameter expansions. This oversight in the command parser can lead to arbitrary command execution, posing a significant risk to systems utilizing this software. Organizations using Roo Code should prioritize immediate remediation to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Roo Code through 3.54.0 contains a command injection vulnerability in the auto-approve execute feature that allows attackers to bypass allowlist/denylist enforcement by nesting command substitutions inside parameter expansion defaults. The command parser in parse-command.ts replaces parameter expansions with opaque placeholders before extracting command substitutions, causing the containsDangerousSubstitution guard to miss nested payloads, which are then auto-approved based on the outer allowlisted command prefix and executed by the shell via execa, enabling arbitrary command execution.