CyberRota Analysis
AI-GeneratedRoo-Code versions up to 3.54.0 are vulnerable to an auto-approve bypass that allows attackers to execute denied shell commands by exploiting a flaw in comment handling within the approval gate's shell parser. This vulnerability can lead to unauthorized command execution with elevated privileges on the developer's machine, posing a significant risk to system integrity. Organizations using Roo-Code should prioritize patching this vulnerability to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability that allows attackers to execute denied shell commands by exploiting a word-boundary mismatch in comment handling between the approval gate's shell parser and bash. Attackers can craft a command string with an allowlisted word immediately followed by a hash character, separator, and denied command to pass the approval gate while bash executes the denied command with the agent's auto-execute privileges on the developer's machine.