gha-lab-d14c91f1bb

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of RooCodeInc/Roo-Code at commit...

CVE-2026-110206

Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine that allows attackers to auto-approve arbitrary shell commands by placing a command substitution in command position. Attackers using indirect prompt injection can submit commands like $echo touch /tmp/x...

CVE-2026-110205

Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine that discards command substitutions placed next to or ? glob characters. Attackers using indirect prompt injection can craft commands like echo $... that match allowlisted prefixes, executing denied...

CVE-2026-110203

Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to auto-approve denied shell commands by abusing quote-masking regex in parseCommandLine. Attackers can use indirect prompt injection with escaped or single-quoted double quotes to hide command separato...

CVE-2026-110204

Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to run denied shell commands because parseCommandLine treats $ command; substitutions as parameter expansions. Attackers using indirect prompt injection can embed denied commands inside an allowlisted...

CVE-2026-110202

Roo Code through 3.54.0 contains a command approval bypass vulnerability in getCommandDecision that allows attackers to auto-approve denied shell commands by prefixing them with a bare & redirect. Attackers using indirect prompt injection can make the allowlist match a redirect target like echo...

CVE-2026-110206 Roo-Code through 3.54.0 Auto-Approve Bypass via Command Substitution at Command Position

Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine that allows attackers to auto-approve arbitrary shell commands by placing a command substitution in command position. Attackers using indirect prompt injection can submit commands like $echo touch /tmp/x...

CVE-2026-110206

Roo-Code versions up to and including 3.54.0 are vulnerable to a command approval bypass in the parseCommandLine() function. The root cause is an interpretation conflict where attackers can use command substitution at the command position to bypass the software's allowlist. By using indirect prom...

EUVD-2026-99247

Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine that allows attackers to auto-approve arbitrary shell commands by placing a command substitution in command position. Attackers using indirect prompt injection can submit commands like $echo touch /tmp/x...

CVE-2026-110206

Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine that allows attackers to auto-approve arbitrary shell commands by placing a command substitution in command position. Attackers using indirect prompt injection can submit commands like $echo touch /tmp/x...

CVE-2026-110205 Roo-Code through 3.54.0 Auto-Approve Bypass via Glob Token Discarding Command Substitution

Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine that discards command substitutions placed next to or ? glob characters. Attackers using indirect prompt injection can craft commands like echo $... that match allowlisted prefixes, executing denied...

EUVD-2026-99246

Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine that discards command substitutions placed next to or ? glob characters. Attackers using indirect prompt injection can craft commands like echo $... that match allowlisted prefixes, executing denied...

CVE-2026-110205

Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine that discards command substitutions placed next to or ? glob characters. Attackers using indirect prompt injection can craft commands like echo $... that match allowlisted prefixes, executing denied...

CVE-2026-110205 Roo-Code through 3.54.0 Auto-Approve Bypass via Glob Token Discarding Command Substitution

Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine that discards command substitutions placed next to or ? glob characters. Attackers using indirect prompt injection can craft commands like echo $... that match allowlisted prefixes, executing denied...

CVE-2026-110205

Roo-Code versions through 3.54.0 are vulnerable to a command approval bypass in the parseCommandLine() function. The flaw occurs because the system discards command substitutions when they are placed adjacent to ＊ or ！ (glob characters). An attacker leveraging indirect prompt injection can craft ...

CVE-2026-110204 Roo-Code through 3.54.0 Auto-Approve Bypass via Funsub Command Substitution

Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to run denied shell commands because parseCommandLine treats $ command; substitutions as parameter expansions. Attackers using indirect prompt injection can embed denied commands inside an allowlisted...

CVE-2026-110203 Roo-Code through 3.54.0 Auto-Approve Bypass via Quote Masking Desynchronization

Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to auto-approve denied shell commands by abusing quote-masking regex in parseCommandLine. Attackers can use indirect prompt injection with escaped or single-quoted double quotes to hide command separato...

CVE-2026-110203

Roo-Code versions through 3.54.0 are vulnerable to a command approval bypass caused by a quote-masking regex flaw in the parseCommandLine() function. Attackers can utilize indirect prompt injection with escaped or single-quoted double quotes to conceal command separators behind allowlisted prefix...

CVE-2026-110204

Roo Code versions through 3.54.0 are vulnerable to a command approval bypass due to how the parseCommandLine() function handles ${ command; } substitutions as parameter expansions. Attackers can utilize indirect prompt injection to embed unauthorized shell commands within allowlisted commands, su...

EUVD-2026-99245

Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to run denied shell commands because parseCommandLine treats $ command; substitutions as parameter expansions. Attackers using indirect prompt injection can embed denied commands inside an allowlisted...