CVE-2026-82536 is an auto-approve bypass vulnerability in Roo-Code through version 3.54.0. The vulnerability arises because the shell command parser does not include the bash pipe operator in its list of disallowed operators. Attackers can exploit this by submitting a command line that starts with an allowlisted prefix, followed by the pipe operator and a denied command. The parser incorrectly approves the entire pipeline, but bash executes the denied command component with the agent's auto-execute privileges on the developer's machine, potentially leading to unauthorized command execution.

An attacker can execute shell commands that are normally denied by the Roo-Code command parser by exploiting the omission of the pipe operator from the disallowed inputs. This can lead to unauthorized command execution with the privileges of the agent running on the developer's machine, potentially compromising system integrity and confidentiality.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should avoid running untrusted commands through the Roo-Code shell command interface and monitor for suspicious command execution patterns.