CVE-2026-63108: Roo Code 3.54.0 Command Injection via Parameter Expansion Parsing
Roo Code through 3.54.0 contains a command injection vulnerability in the auto-approve execute feature that allows attackers to bypass allowlist/denylist enforcement by nesting command substitutions inside parameter expansion defaults. The command parser in parse-command.ts replaces parameter expansions with opaque placeholders before extracting command substitutions, causing the containsDangerousSubstitution guard to miss nested payloads, which are then auto-approved based on the outer allowlisted command prefix and executed by the shell via execa, enabling arbitrary command execution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Roo Codeto a version that resolves this vulnerability.Fixed in 3.54.0 - Compensating control
Disable or restrict the Roo Code 'auto-approve execute' feature until the command injection issue is patched, to prevent auto-approval and shell execution of injected commands.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-63108?
The severity of CVE-2026-63108 is rated high with a score of 8.8.
How do I fix CVE-2026-63108?
To fix CVE-2026-63108, update Roo Code to version 3.54.1 or later.
What type of vulnerability is CVE-2026-63108?
CVE-2026-63108 is classified as a command injection vulnerability.
What can attackers do with CVE-2026-63108?
Attackers can exploit CVE-2026-63108 to bypass allowlist and denylist enforcement through nested command substitutions.
In which versions of Roo Code is CVE-2026-63108 present?
CVE-2026-63108 is present in Roo Code versions up to and including 3.54.0.