Veille CVE

Samedi 17 octobre 2026

1 CVE

Critique 0 Élevée 1 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « RooCodeInc Roo-Code » ✕
  1. CVE-2026-110206 8.8 Élevée

    RooCodeInc Roo-Code · Roocode roo code

    Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine() that allows attackers to auto-approve arbitrary shell commands by placing a command substitution in command position. Attackers using indirect prompt injection can submit commands like $(echo touch /tmp/x) that pass the echo allowlist check, causing the shell to execute the output without user approval.