{"id":"CVE-2026-82537","title":"Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability that allows attackers to execute denied shell commands by exploiting a word-boundary mismatch in comment handling between the approval gate's shell parser and bash","summary":"Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability that allows attackers to execute denied shell commands by exploiting a word-boundary mismatch in comment handling between the approval gate's shell parser and bash. At…","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-436"],"vendor":"RooCodeInc","product":"Roo-Code","affected":["Roo-Code <= 3.54.0"],"published":"2026-09-08","updated":"2026-09-11","sourceUpdated":"2026-09-11T21:17:24.980","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-82537","references":[{"url":"https://github.com/7rah/oss-cve/blob/main/roocode-group06-comment-boundary.md","label":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/roo-code-auto-approve-bypass-via-shell-parser-word-boundary-mismatch","label":"disclosure@vulncheck.com"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"total","timestamp":"2026-09-11T20:55:24.079034Z"},"epss":0.0028,"epssPercentile":0.20729,"ingestedAt":"2026-09-08T19:08:49.638Z","slug":"CVE-2026-82537","body":"## Overview\n\nRoo-Code through 3.54.0 contains an auto-approve bypass vulnerability that allows attackers to execute denied shell commands by exploiting a word-boundary mismatch in comment handling between the approval gate's shell parser and bash. Attackers can craft a command string with an allowlisted word immediately followed by a hash character, separator, and denied command to pass the approval gate while bash executes the denied command with the agent's auto-execute privileges on the developer's machine.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":60,"depthScoreParts":{"impact":48.4,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":202010,"id":"CVE-2026-82537","ts":1789400007735,"field":"exploit_available","old":"false","new":"true"},{"seq":200737,"id":"CVE-2026-82537","ts":1789397600920,"field":"exploit_available","old":"true","new":"false"},{"seq":199432,"id":"CVE-2026-82537","ts":1789395507263,"field":"exploit_available","old":"false","new":"true"},{"seq":198677,"id":"CVE-2026-82537","ts":1789392199676,"field":"exploit_available","old":"true","new":"false"},{"seq":197010,"id":"CVE-2026-82537","ts":1789384286621,"field":"exploit_available","old":"false","new":"true"},{"seq":196368,"id":"CVE-2026-82537","ts":1789383753127,"field":"exploit_available","old":"true","new":"false"},{"seq":195296,"id":"CVE-2026-82537","ts":1789380564702,"field":"exploit_available","old":"false","new":"true"},{"seq":194139,"id":"CVE-2026-82537","ts":1789378753187,"field":"exploit_available","old":"true","new":"false"},{"seq":192926,"id":"CVE-2026-82537","ts":1789376503996,"field":"exploit_available","old":"false","new":"true"},{"seq":191713,"id":"CVE-2026-82537","ts":1789373608476,"field":"exploit_available","old":"true","new":"false"},{"seq":190498,"id":"CVE-2026-82537","ts":1789369459784,"field":"exploit_available","old":"false","new":"true"},{"seq":189285,"id":"CVE-2026-82537","ts":1789368387174,"field":"exploit_available","old":"true","new":"false"},{"seq":188068,"id":"CVE-2026-82537","ts":1789365224797,"field":"exploit_available","old":"false","new":"true"},{"seq":186855,"id":"CVE-2026-82537","ts":1789363464459,"field":"exploit_available","old":"true","new":"false"},{"seq":185641,"id":"CVE-2026-82537","ts":1789361212447,"field":"exploit_available","old":"false","new":"true"},{"seq":184428,"id":"CVE-2026-82537","ts":1789358339168,"field":"exploit_available","old":"true","new":"false"},{"seq":182679,"id":"CVE-2026-82537","ts":1789354309661,"field":"exploit_available","old":"false","new":"true"},{"seq":181472,"id":"CVE-2026-82537","ts":1789353309237,"field":"exploit_available","old":"true","new":"false"},{"seq":180265,"id":"CVE-2026-82537","ts":1789350272120,"field":"exploit_available","old":"false","new":"true"},{"seq":179058,"id":"CVE-2026-82537","ts":1789348270182,"field":"exploit_available","old":"true","new":"false"},{"seq":177851,"id":"CVE-2026-82537","ts":1789346362414,"field":"exploit_available","old":"false","new":"true"},{"seq":176644,"id":"CVE-2026-82537","ts":1789343169354,"field":"exploit_available","old":"true","new":"false"},{"seq":174761,"id":"CVE-2026-82537","ts":1789334865461,"field":"exploit_available","old":"false","new":"true"},{"seq":173556,"id":"CVE-2026-82537","ts":1789333671939,"field":"exploit_available","old":"true","new":"false"},{"seq":172370,"id":"CVE-2026-82537","ts":1789331086452,"field":"exploit_available","old":"false","new":"true"},{"seq":171184,"id":"CVE-2026-82537","ts":1789328761951,"field":"exploit_available","old":"true","new":"false"},{"seq":169979,"id":"CVE-2026-82537","ts":1789327155340,"field":"exploit_available","old":"false","new":"true"},{"seq":168774,"id":"CVE-2026-82537","ts":1789323822171,"field":"exploit_available","old":"true","new":"false"},{"seq":167569,"id":"CVE-2026-82537","ts":1789319676891,"field":"exploit_available","old":"false","new":"true"},{"seq":166364,"id":"CVE-2026-82537","ts":1789318751165,"field":"exploit_available","old":"true","new":"false"},{"seq":165159,"id":"CVE-2026-82537","ts":1789315781190,"field":"exploit_available","old":"false","new":"true"},{"seq":163954,"id":"CVE-2026-82537","ts":1789313613934,"field":"exploit_available","old":"true","new":"false"},{"seq":162749,"id":"CVE-2026-82537","ts":1789311894091,"field":"exploit_available","old":"false","new":"true"},{"seq":161544,"id":"CVE-2026-82537","ts":1789308708321,"field":"exploit_available","old":"true","new":"false"},{"seq":159657,"id":"CVE-2026-82537","ts":1789300461975,"field":"exploit_available","old":"false","new":"true"},{"seq":158824,"id":"CVE-2026-82537","ts":1789299571599,"field":"exploit_available","old":"true","new":"false"},{"seq":158287,"id":"CVE-2026-82537","ts":1789296692969,"field":"exploit_available","old":"false","new":"true"},{"seq":156646,"id":"CVE-2026-82537","ts":1789294747653,"field":"exploit_available","old":"true","new":"false"},{"seq":155441,"id":"CVE-2026-82537","ts":1789292956213,"field":"exploit_available","old":"false","new":"true"},{"seq":154236,"id":"CVE-2026-82537","ts":1789289788342,"field":"exploit_available","old":"true","new":"false"},{"seq":153664,"id":"CVE-2026-82537","ts":1789285353474,"field":"exploit_available","old":"false","new":"true"},{"seq":152526,"id":"CVE-2026-82537","ts":1789281256779,"field":"exploit_available","old":"true","new":"false"},{"seq":151487,"id":"CVE-2026-82537","ts":1789277616940,"field":"exploit_available","old":"false","new":"true"},{"seq":150448,"id":"CVE-2026-82537","ts":1789276231289,"field":"exploit_available","old":"true","new":"false"},{"seq":149415,"id":"CVE-2026-82537","ts":1789273815339,"field":"exploit_available","old":"false","new":"true"},{"seq":148382,"id":"CVE-2026-82537","ts":1789271329456,"field":"exploit_available","old":"true","new":"false"},{"seq":146413,"id":"CVE-2026-82537","ts":1789269377438,"field":"exploit_available","old":"false","new":"true"},{"seq":145219,"id":"CVE-2026-82537","ts":1789266326770,"field":"exploit_available","old":"true","new":"false"},{"seq":144123,"id":"CVE-2026-82537","ts":1789262598198,"field":"exploit_available","old":"false","new":"true"},{"seq":143027,"id":"CVE-2026-82537","ts":1789261514344,"field":"exploit_available","old":"true","new":"false"}]}