roocode records
11 published records for vendor roocode.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 7
- With a fix record
- 72.7%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')2
- CWE-94 Improper Control of Generation of Code ('Code Injection')2
- CWE-20 Improper Input Validation1
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1
- CWE-552 Files or Directories Accessible to External Parties1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
11 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2026-30307No exploit | Roo Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanismroocode · roo code · CWE-94 | Critical9.8 | — | 2.2% | Mar 30, 2026 |
39Monitor | CVE-2025-58371Proof of concept | Roo Code is vulnerable to command injection via GitHub actions workflowroocode · roo code · CWE-78 | Critical9.9 | — | 0.8% | Sep 5, 2025 |
39Monitor | CVE-2025-58372No exploit | Roo Code: Potential Remote Code Execution via .code-workspaceroocode · roo code · CWE-94 | Critical9.8 | — | 0.5% | Sep 5, 2025 |
32Monitor | CVE-2025-53536No exploit | Roo Code allows Potential Remote Code Execution via .vscode/settings.jsonroocode · roo code · CWE-552 | High8.1 | — | 0.7% | Jul 7, 2025 |
32Monitor | CVE-2025-53098No exploit | Roo Code Vulnerable to Potential Remote Code Execution via Model Context Protocolroocode · roo code · CWE-77 | High8.1 | — | 0.7% | Jun 27, 2025 |
32Monitor | CVE-2025-65946No exploit | Roo Code is Vulnerable to Potential Remote Code Execution via zsh Command Validation Bugroocode · roo code · CWE-20 | High8.1 | — | 0.7% | Nov 21, 2025 |
32Monitor | CVE-2025-58370No exploit | Roo Code: Potential Remote Code Execution via Bash Parameter Expansion and Indirect Referenceroocode · roo code · CWE-78 | High8.1 | — | 0.4% | Sep 5, 2025 |
31Monitor | CVE-2025-54377No exploit | Roo Code Lacks Line Break Validation in its Command Execution Toolroocode · roo code · CWE-77 | High7.8 | — | 1.1% | Jul 23, 2025 |
31Monitor | CVE-2025-58374No exploit | Roo Code: Auto-approve allows npm install execution of malicious postinstall scriptsroocode · roo code · CWE-78 | High7.8 | — | 0.2% | Sep 5, 2025 |
30Monitor | CVE-2025-53097No exploit | Roo Code extension vulnerable to Potential Information Leakage via JSON Schemaroocode · roo code · CWE-74 | High7.5 | — | 0.5% | Jun 27, 2025 |
26Monitor | CVE-2025-58373No exploit | Roo Code: Symlink-bypass of .rooignore can lead to unintended file disclosureroocode · roo code · CWE-59 | Medium6.5 | — | 0.3% | Sep 5, 2025 |
- CVE-2026-3030740Plan
Roo Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism
CriticalCVSS 9.8No exploitEPSS 2%roocode · roo codeMar 30, 2026
- CVE-2025-5837139Monitor
Roo Code is vulnerable to command injection via GitHub actions workflow
CriticalCVSS 9.9Proof of conceptEPSS 1%roocode · roo codeSep 5, 2025
- CVE-2025-5837239Monitor
Roo Code: Potential Remote Code Execution via .code-workspace
CriticalCVSS 9.8No exploitEPSS 1%roocode · roo codeSep 5, 2025
- CVE-2025-5353632Monitor
Roo Code allows Potential Remote Code Execution via .vscode/settings.json
HighCVSS 8.1No exploitEPSS 1%roocode · roo codeJul 7, 2025
- CVE-2025-5309832Monitor
Roo Code Vulnerable to Potential Remote Code Execution via Model Context Protocol
HighCVSS 8.1No exploitEPSS 1%roocode · roo codeJun 27, 2025
- CVE-2025-6594632Monitor
Roo Code is Vulnerable to Potential Remote Code Execution via zsh Command Validation Bug
HighCVSS 8.1No exploitEPSS 1%roocode · roo codeNov 21, 2025
- CVE-2025-5837032Monitor
Roo Code: Potential Remote Code Execution via Bash Parameter Expansion and Indirect Reference
HighCVSS 8.1No exploitEPSS 0%roocode · roo codeSep 5, 2025
- CVE-2025-5437731Monitor
Roo Code Lacks Line Break Validation in its Command Execution Tool
HighCVSS 7.8No exploitEPSS 1%roocode · roo codeJul 23, 2025
- CVE-2025-5837431Monitor
Roo Code: Auto-approve allows npm install execution of malicious postinstall scripts
HighCVSS 7.8No exploitEPSS 0%roocode · roo codeSep 5, 2025
- CVE-2025-5309730Monitor
Roo Code extension vulnerable to Potential Information Leakage via JSON Schema
HighCVSS 7.5No exploitEPSS 1%roocode · roo codeJun 27, 2025
- CVE-2025-5837326Monitor
Roo Code: Symlink-bypass of .rooignore can lead to unintended file disclosure
MediumCVSS 6.5No exploitEPSS 0%roocode · roo codeSep 5, 2025