Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

Roo-Code — Vulnerabilities & Security Advisories 12

All 12 CVE vulnerabilities found in Roo-Code, with AI-generated Chinese analysis, references, and POCs.

Vendor: RooCodeInc

CVE IDTitleCVSSSeverityPublished
CVE-2026-63108 Roo Code 3.54.0 Command Injection via Parameter Expansion Parsing CWE-184 8.8 High2026-07-20
CVE-2025-65946 Roo Code is Vulnerable to Potential Remote Code Execution via zsh Command Validation Bug CWE-77 8.1 High2025-11-21
CVE-2025-58374 Roo Code: Auto-approve allows npm install execution of malicious postinstall scripts CWE-78 7.8 High2025-09-06
CVE-2025-58373 Roo Code: Symlink-bypass of .rooignore can lead to unintended file disclosure CWE-59 5.5 Medium2025-09-05
CVE-2025-58372 Roo Code: Potential Remote Code Execution via .code-workspace CWE-732 8.1 High2025-09-05
CVE-2025-58371 Roo Code is vulnerable to command injection via GitHub actions workflow CWE-78 8.8AIHighAI2025-09-05
CVE-2025-58370 Roo Code: Potential Remote Code Execution via Bash Parameter Expansion and Indirect Reference CWE-78 8.1 High2025-09-05
CVE-2025-57771 Roo-Code potential remote code execution via auto-execute command parsing flaw CWE-78 8.1 High2025-08-22
CVE-2025-54377 Roo Code Lacks Line Break Validation in its Command Execution Tool CWE-77 7.8 High2025-07-23
CVE-2025-53536 Roo Code allows Potential Remote Code Execution via .vscode/settings.json CWE-552 8.1 High2025-07-07
CVE-2025-53098 Roo Code Vulnerable to Potential Remote Code Execution via Model Context Protocol CWE-77 8.1 High2025-06-27
CVE-2025-53097 Roo Code extension vulnerable to Potential Information Leakage via JSON Schema CWE-74 5.9 Medium2025-06-27

All 12 known CVE vulnerabilities affecting Roo-Code with full Chinese analysis, references, and POCs where available.