CVE-2026-82537 Roo-Code 3.54.0 Auto-Approve Bypass via Shell Parser Word-Boundary Mismatch
Attackers bypass auto-approval restrictions to execute arbitrary shell commands with developer privileges by exploiting a parser mismatch.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2026-82537?
CVE-2026-82537 is a high-severity vulnerability in RooCodeInc Roo-Code, published on 8 Sep 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability that allows attackers to execute denied shell commands by exploiting a word-boundary mismatch in comment handling between the approval gate's shell parser and bash. Attackers can craft a command string with an allowlisted word immediately followed by a hash character, separator, and denied command to pass the approval gate while bash executes the denied command with the agent's auto-execute privileges on the developer's machine.
Weakness: CWE-436
Which versions are affected by CVE-2026-82537?
How do I fix CVE-2026-82537?
No fix has been published for CVE-2026-82537 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-82537 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-82537 exists.
Sources
Also known as GHSA-8fwh-72qq-gr52.