Roo‑Code versions through 3.54.0 contain an auto‑approve bypass that allows attackers to inject shell commands by abusing the quote‑masking regex in parseCommandLine(). The flaw permits malicious input to be accepted as safe, enabling execution of arbitrary commands without user approval. The vulnerability aligns with CWE‑436, which relates to improper neutralization of input that can lead to code execution.

All releases of Roo‑Code produced by RooCodeInc up to and including version 3.54.0 are vulnerable. The issue is present in the core command‑parsing module shared across the product line, so any deployment using a vulnerable version is affected.

The CVSS score of 7.7 indicates a high severity, while the EPSS score of less than 1% suggests a low probability of active exploitation at present. The vulnerability is not listed in the CISA KEV catalog. Attackers must supply crafted input via the command interface, which may be accessible locally or remotely depending on the deployment. Failure to mitigate can lead to compromise of confidentiality, integrity, and availability of the system.