CVE-2026-82536— Roo-Code 3.54.0 Auto-Approve Bypass via Shell Command Pipe Operator
Quick assessment
Affected
RooCodeInc Roo-Code
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Roo-Code 3.54.0 及更早版本中存在一个“自动批准”（auto-approve）绕过漏洞，位于 shell 命令解析逻辑中。该漏洞允许攻击者利用命令解析器的操作符 token 集合中遗漏了 bash 管道操作符（ ），从而执行本应被拒绝的 shell 命令。 攻击者可以构造一条命令行：先使用一个在允许列表中的命令前缀，随后紧跟用于重定向标准错误的管道操作符（ ），再接上被拒绝的命令。这样，解析器会将整条管道流水线视为已批准，而 bash 会以代理（agent）的自动执行权限，在开发者的机器上执行其中被拒
Possible ATT&CK Techniques 1 AI
T1059 · Command and Scripting InterpreterAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| RooCodeInc | Roo-Code | ≤ 3.54.0 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-82536
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Roo-Code 3.54.0 Auto-Approve Bypass via Shell Command Pipe Operator
Source: CVE Program / CVE List V5
Vulnerability Description
Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability in the shell command parsing logic that allows attackers to execute denied shell commands by exploiting the omission of the bash pipe operator from the command parser's operator token set. Attackers can craft a command line with an allowlisted prefix followed by the stderr-redirecting pipe operator and a denied command, causing the parser to approve the full pipeline while bash executes the denied component with the agent's auto-execute privileges on the developer's machine.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
不完整的黑名单
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| RooCodeInc | Roo-Code | 0 ~ 3.54.0 | - |
|
II. Public POCs for CVE-2026-82536
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-82536
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-82536 (2)
-
-
🔗 oss-cve/roocode-group04-pipe-both-operator.md at main · 7rah/oss-cve · GitHub Read full article technical-description exploit
IV. Related Vulnerabilities
Same product: Roo-Code
-
CVE-2026-82537
Roo-Code 3.54.0 Auto-Approve Bypass via Shell Parser Word-Bo -
CVE-2026-81837
RooCodeInc Roo-Code ApplyPatchTool ApplyPatchTool.ts path.re -
CVE-2026-81836
RooCodeInc Roo-Code OAuth Callback oauth.ts cleartext transm -
CVE-2026-81835
RooCodeInc Roo-Code MCP Integration Trust Model malicious_mc -
CVE-2026-81834
RooCodeInc Roo-Code README File ExecaTerminalProcess code in
Same vendor: RooCodeInc
-
CVE-2026-82537
Roo-Code 3.54.0 Auto-Approve Bypass via Shell Parser Word-Bo -
CVE-2026-81837
RooCodeInc Roo-Code ApplyPatchTool ApplyPatchTool.ts path.re -
CVE-2026-81836
RooCodeInc Roo-Code OAuth Callback oauth.ts cleartext transm -
CVE-2026-81835
RooCodeInc Roo-Code MCP Integration Trust Model malicious_mc -
CVE-2026-81834
RooCodeInc Roo-Code README File ExecaTerminalProcess code in
Same weakness: CWE-184
-
CVE-2026-69624
Active Directory Certificate Services (AD CS) Tampering Vuln -
CVE-2026-70334
Visual Studio Code Security Feature Bypass Vulnerability -
CVE-2026-33197
BDS Module Bypass Secure Boot Advisory -
CVE-2026-85787
An incomplete list of disallowed inputs in the SQL validatio -
CVE-2026-77124
Nexus Repository 3 - Script Execution Disable Setting Not En
V. Comments for CVE-2026-82536
No comments yet