Cpe:2.3:a:roo_code:roo_code:*:*:*:*:*:*:*:*

Roo Code through 3.54.0 contains a command approval bypass in getCommandDecision() allowing attackers to execute denied shell commands by prefixing them with a redirection operator.