CVE-2026-82536: Incomplete List of Disallowed Inputs in RooCodeInc Roo-Code

Roo-Code versions up to 3.54.0 contain a vulnerability in the shell command parser that fails to include the bash pipe operator in its list of disallowed inputs. This omission enables attackers to bypass the auto-approval mechanism by constructing command lines that combine an allowlisted prefix with a stderr-redirecting pipe operator and a denied command. The parser incorrectly approves the entire pipeline, but bash executes the denied command component with the privileges of the agent running on the developer's machine, potentially leading to unauthorized command execution.

An attacker can execute shell commands that are normally denied by the Roo-Code command parser by exploiting the missing pipe operator in the disallowed inputs list. This can lead to unauthorized command execution with the privileges of the Roo-Code agent on the developer's machine, potentially compromising system integrity and confidentiality.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid running untrusted commands through the Roo-Code shell command interface and monitor for updates from RooCodeInc regarding patches or workarounds.