Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Roo-Code — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in Roo-Code, with AI-generated Chinese analysis, references, and POCs.

Vendor: RooCodeInc

CVE IDTitleCVSSSeverityPublished
CVE-2025-65946 Roo Code is Vulnerable to Potential Remote Code Execution via zsh Command Validation Bug CWE-77 8.1 High2025-11-21
CVE-2025-58374 Roo Code: Auto-approve allows npm install execution of malicious postinstall scripts CWE-78 7.8 High2025-09-06
CVE-2025-58373 Roo Code: Symlink-bypass of .rooignore can lead to unintended file disclosure CWE-59 5.5 Medium2025-09-05
CVE-2025-58372 Roo Code: Potential Remote Code Execution via .code-workspace CWE-732 8.1 High2025-09-05
CVE-2025-58371 Roo Code is vulnerable to command injection via GitHub actions workflow CWE-78 8.8AIHighAI2025-09-05
CVE-2025-58370 Roo Code: Potential Remote Code Execution via Bash Parameter Expansion and Indirect Reference CWE-78 8.1 High2025-09-05
CVE-2025-57771 Roo-Code potential remote code execution via auto-execute command parsing flaw CWE-78 8.1 High2025-08-22
CVE-2025-54377 Roo Code Lacks Line Break Validation in its Command Execution Tool CWE-77 7.8 High2025-07-23
CVE-2025-53536 Roo Code allows Potential Remote Code Execution via .vscode/settings.json CWE-552 8.1 High2025-07-07
CVE-2025-53098 Roo Code Vulnerable to Potential Remote Code Execution via Model Context Protocol CWE-77 8.1 High2025-06-27
CVE-2025-53097 Roo Code extension vulnerable to Potential Information Leakage via JSON Schema CWE-74 5.9 Medium2025-06-27

All 11 known CVE vulnerabilities affecting Roo-Code with full Chinese analysis, references, and POCs where available.