Browse CVEs

CRITICAL 9.8 CVE-2026-30307 Roo Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism complete… Roo Code after 3.46.1 Fix from $2,3002026-03-30 HIGH 8.1 CVE-2025-65946 Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Prior to version 3.26.7, Due to an error in validation it was possibl… Roo Code 3.26.7+ Fix from $1,9502025-11-21 HIGH 7.8 CVE-2025-58374 Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Versions 3.25.23 and below contain a default list of allowed commands… Roo Code 3.26.0+ Fix from $1,9502025-09-06 CRITICAL 9.8 CVE-2025-58371 Roo Code is an AI-powered autonomous coding agent that lives in users' editors. In versions 3.26.6 and below, a Github workflow used unsanitized pull… Roo Code 3.26.7+ Fix from $2,3002025-09-05 CRITICAL 9.8 CVE-2025-58372 Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Versions 3.25.23 and below contain a vulnerability where certain VS C… Roo Code 3.26.0+ Fix from $2,3002025-09-05 HIGH 8.1 CVE-2025-58370 Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Versions below 3.26.0 contain a vulnerability in the command parsing … Roo Code 3.26.0+ Fix from $1,9502025-09-05 MEDIUM 6.5 CVE-2025-58373 Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Versions 3.25.23 and below contain a vulnerability where .rooignore p… Roo Code 3.26.0+ Fix from $1,6002025-09-05 HIGH 7.8 CVE-2025-54377 Roo Code is an AI-powered autonomous coding agent that lives in users' editors. In versions 3.23.18 and below, RooCode does not validate line breaks … Roo Code 3.23.19+ Fix from $1,9502025-07-23 HIGH 8.1 CVE-2025-53536 Roo Code is an AI-powered autonomous coding agent. Prior to 3.22.6, if the victim had "Write" auto-approved, an attacker with the ability to submit p… Roo Code 3.22.6+ Fix from $1,9502025-07-07 HIGH 8.1 CVE-2025-53098 Roo Code is an AI-powered autonomous coding agent. The project-specific MCP configuration for the Roo Code agent is stored in the `.roo/mcp.json` fil… Roo Code 3.20.3+ Fix from $1,9502025-06-27 HIGH 7.5 CVE-2025-53097 Roo Code is an AI-powered autonomous coding agent. Prior to version 3.20.3, there was an issue where the Roo Code agent's `search_files` tool did not… Roo Code 3.20.3+ Fix from $1,9502025-06-27