CVE-2026-82537 describes a vulnerability in Roo-Code through version 3.54.0 where an attacker can bypass the auto-approval mechanism for shell commands. The flaw arises from a discrepancy in comment parsing between the approval gate's shell parser and bash. Specifically, an attacker can craft a command string containing an allowlisted word immediately followed by a hash character, a separator, and a denied command. This crafted input passes the approval gate but results in bash executing the denied command with the agent's auto-execute privileges on the developer's machine.

An attacker can execute shell commands that are intended to be denied by exploiting the parsing mismatch, potentially leading to unauthorized command execution with the privileges of the Roo-Code agent on the developer's machine. This can result in compromise of the developer environment or execution of malicious code.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution with auto-approve features and consider disabling or restricting them to prevent exploitation.