Roocode

Roo Code

14 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2025-54377

Exploit
  • EPSS 1.13%
  • Veröffentlicht 23.07.2025 20:36:01
  • Zuletzt bearbeitet 11.09.2025 15:56:35

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. In versions 3.23.18 and below, RooCode does not validate line breaks (\n) in its command input, allowing potential bypass of the allow-list mechanism. The project appears...

8.1

CVE-2025-53536

  • EPSS 0.66%
  • Veröffentlicht 07.07.2025 17:57:36
  • Zuletzt bearbeitet 15.09.2025 18:07:43

Roo Code is an AI-powered autonomous coding agent. Prior to 3.22.6, if the victim had "Write" auto-approved, an attacker with the ability to submit prompts to the agent could write to VS Code settings files and trigger code execution. There were mult...

8.1

CVE-2025-53098

  • EPSS 0.57%
  • Veröffentlicht 27.06.2025 21:43:35
  • Zuletzt bearbeitet 15.09.2025 18:08:32

Roo Code is an AI-powered autonomous coding agent. The project-specific MCP configuration for the Roo Code agent is stored in the `.roo/mcp.json` file within the VS Code workspace. Because the MCP configuration format allows for execution of arbitrar...

7.5

CVE-2025-53097

  • EPSS 0.43%
  • Veröffentlicht 27.06.2025 21:43:31
  • Zuletzt bearbeitet 15.09.2025 13:47:38

Roo Code is an AI-powered autonomous coding agent. Prior to version 3.20.3, there was an issue where the Roo Code agent's `search_files` tool did not respect the setting to disable reads outside of the VS Code workspace. This means that an attacker w...