Vulnerability index

Browse CVEs

11 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Roo Code CRITICAL 9.8
CVE-2026-30307

Roo Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism complete…

Fix: after 3.46.1
Fix from $2,300 2026-03-30
Roo Code HIGH 8.1
CVE-2025-65946

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Prior to version 3.26.7, Due to an error in validation it was possibl…

Fix: 3.26.7+
Fix from $1,950 2025-11-21
Roo Code HIGH 7.8
CVE-2025-58374

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Versions 3.25.23 and below contain a default list of allowed commands…

Fix: 3.26.0+
Fix from $1,950 2025-09-06
Roo Code CRITICAL 9.8
CVE-2025-58371

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. In versions 3.26.6 and below, a Github workflow used unsanitized pull…

Fix: 3.26.7+
Fix from $2,300 2025-09-05
Roo Code CRITICAL 9.8
CVE-2025-58372

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Versions 3.25.23 and below contain a vulnerability where certain VS C…

Fix: 3.26.0+
Fix from $2,300 2025-09-05
Roo Code HIGH 8.1
CVE-2025-58370

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Versions below 3.26.0 contain a vulnerability in the command parsing …

Fix: 3.26.0+
Fix from $1,950 2025-09-05
Roo Code MEDIUM 6.5
CVE-2025-58373

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Versions 3.25.23 and below contain a vulnerability where .rooignore p…

Fix: 3.26.0+
Fix from $1,600 2025-09-05
Roo Code HIGH 7.8
CVE-2025-54377

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. In versions 3.23.18 and below, RooCode does not validate line breaks …

Fix: 3.23.19+
Fix from $1,950 2025-07-23
Roo Code HIGH 8.1
CVE-2025-53536

Roo Code is an AI-powered autonomous coding agent. Prior to 3.22.6, if the victim had "Write" auto-approved, an attacker with the ability to submit p…

Fix: 3.22.6+
Fix from $1,950 2025-07-07
Roo Code HIGH 8.1
CVE-2025-53098

Roo Code is an AI-powered autonomous coding agent. The project-specific MCP configuration for the Roo Code agent is stored in the `.roo/mcp.json` fil…

Fix: 3.20.3+
Fix from $1,950 2025-06-27
Roo Code HIGH 7.5
CVE-2025-53097

Roo Code is an AI-powered autonomous coding agent. Prior to version 3.20.3, there was an issue where the Roo Code agent's `search_files` tool did not…

Fix: 3.20.3+
Fix from $1,950 2025-06-27