Ridvay Code's command auto-approval module attempts to whitelist safe commands using regular expressions but does not account for shell command substitution constructs like $(...) and backticks. An attacker can craft commands embedding malicious shell code within arguments (e.g., git log --grep="$(malicious_command)"), causing the system to misclassify the command as safe and automatically approve it. The underlying shell executes the injected code, resulting in remote code execution without user interaction. This vulnerability is classified under CWE-78 (OS Command Injection) and has a critical CVSS 3.1 score of 9.8.

Successful exploitation allows an unauthenticated attacker to execute arbitrary OS commands remotely with the privileges of the affected application. This leads to full compromise of confidentiality, integrity, and availability of the system running Ridvay Code's command auto-approval module. The whitelist mechanism intended to prevent dangerous commands is rendered ineffective due to improper parsing of shell command substitution syntax.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided at this time. Until a patch is available, avoid using the vulnerable command auto-approval module or disable automatic command approval features. Monitor vendor communications for updates and apply official fixes promptly once released.