The vulnerability arises from a flaw in parseCommandLine() that treats ${ command; } substitutions as parameter expansions. This allows an attacker to embed a denied shell command inside an allowlisted command such as echo, thereby executing arbitrary commands without user approval on bash 5.3+ or ksh93. The result is the ability to run any command the system user can execute, constituting remote code execution. The weakness is identified as CWE-436.

The affected product is Roo-Code from RooCodeInc. All releases through version 3.54.0 are vulnerable. Users running any version of Roo-Code up to and including 3.54.0 may be impacted.

The CVSS score is 7.7, indicating high severity. EPSS is not available, but the lack of a KEV listing suggests that exploitation has not been widely observed yet. Attackers would need to supply input that includes a ${ … } construct, most likely through a channel that accepts user prompts or scripts. Once injected, the command is executed without further approval, giving the attacker full control of the underlying shell environment.