roocode kayıtları
roocode üreticisine ait 11 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 7
- Düzeltme kaydı olan
- %72,7
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')2
- CWE-94 Improper Control of Generation of Code ('Code Injection')2
- CWE-20 Improper Input Validation1
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1
- CWE-552 Files or Directories Accessible to External Parties1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
11 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2026-30307İstismar yok | Roo Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanismroocode · roo code · CWE-94 | Kritik9,8 | — | %2,2 | 30 Mar 2026 |
39İzleyin | CVE-2025-58371Kavram kanıtı | Roo Code is vulnerable to command injection via GitHub actions workflowroocode · roo code · CWE-78 | Kritik9,9 | — | %0,8 | 5 Eyl 2025 |
39İzleyin | CVE-2025-58372İstismar yok | Roo Code: Potential Remote Code Execution via .code-workspaceroocode · roo code · CWE-94 | Kritik9,8 | — | %0,5 | 5 Eyl 2025 |
32İzleyin | CVE-2025-53536İstismar yok | Roo Code allows Potential Remote Code Execution via .vscode/settings.jsonroocode · roo code · CWE-552 | Yüksek8,1 | — | %0,7 | 7 Tem 2025 |
32İzleyin | CVE-2025-53098İstismar yok | Roo Code Vulnerable to Potential Remote Code Execution via Model Context Protocolroocode · roo code · CWE-77 | Yüksek8,1 | — | %0,7 | 27 Haz 2025 |
32İzleyin | CVE-2025-65946İstismar yok | Roo Code is Vulnerable to Potential Remote Code Execution via zsh Command Validation Bugroocode · roo code · CWE-20 | Yüksek8,1 | — | %0,7 | 21 Kas 2025 |
32İzleyin | CVE-2025-58370İstismar yok | Roo Code: Potential Remote Code Execution via Bash Parameter Expansion and Indirect Referenceroocode · roo code · CWE-78 | Yüksek8,1 | — | %0,4 | 5 Eyl 2025 |
31İzleyin | CVE-2025-54377İstismar yok | Roo Code Lacks Line Break Validation in its Command Execution Toolroocode · roo code · CWE-77 | Yüksek7,8 | — | %1,1 | 23 Tem 2025 |
31İzleyin | CVE-2025-58374İstismar yok | Roo Code: Auto-approve allows npm install execution of malicious postinstall scriptsroocode · roo code · CWE-78 | Yüksek7,8 | — | %0,2 | 5 Eyl 2025 |
30İzleyin | CVE-2025-53097İstismar yok | Roo Code extension vulnerable to Potential Information Leakage via JSON Schemaroocode · roo code · CWE-74 | Yüksek7,5 | — | %0,5 | 27 Haz 2025 |
26İzleyin | CVE-2025-58373İstismar yok | Roo Code: Symlink-bypass of .rooignore can lead to unintended file disclosureroocode · roo code · CWE-59 | Orta6,5 | — | %0,3 | 5 Eyl 2025 |
- CVE-2026-3030740Planlayın
Roo Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism
KritikCVSS 9,8İstismar yokEPSS %2roocode · roo code30 Mar 2026
- CVE-2025-5837139İzleyin
Roo Code is vulnerable to command injection via GitHub actions workflow
KritikCVSS 9,9Kavram kanıtıEPSS %1roocode · roo code5 Eyl 2025
- CVE-2025-5837239İzleyin
Roo Code: Potential Remote Code Execution via .code-workspace
KritikCVSS 9,8İstismar yokEPSS %1roocode · roo code5 Eyl 2025
- CVE-2025-5353632İzleyin
Roo Code allows Potential Remote Code Execution via .vscode/settings.json
YüksekCVSS 8,1İstismar yokEPSS %1roocode · roo code7 Tem 2025
- CVE-2025-5309832İzleyin
Roo Code Vulnerable to Potential Remote Code Execution via Model Context Protocol
YüksekCVSS 8,1İstismar yokEPSS %1roocode · roo code27 Haz 2025
- CVE-2025-6594632İzleyin
Roo Code is Vulnerable to Potential Remote Code Execution via zsh Command Validation Bug
YüksekCVSS 8,1İstismar yokEPSS %1roocode · roo code21 Kas 2025
- CVE-2025-5837032İzleyin
Roo Code: Potential Remote Code Execution via Bash Parameter Expansion and Indirect Reference
YüksekCVSS 8,1İstismar yokEPSS %0roocode · roo code5 Eyl 2025
- CVE-2025-5437731İzleyin
Roo Code Lacks Line Break Validation in its Command Execution Tool
YüksekCVSS 7,8İstismar yokEPSS %1roocode · roo code23 Tem 2025
- CVE-2025-5837431İzleyin
Roo Code: Auto-approve allows npm install execution of malicious postinstall scripts
YüksekCVSS 7,8İstismar yokEPSS %0roocode · roo code5 Eyl 2025
- CVE-2025-5309730İzleyin
Roo Code extension vulnerable to Potential Information Leakage via JSON Schema
YüksekCVSS 7,5İstismar yokEPSS %1roocode · roo code27 Haz 2025
- CVE-2025-5837326İzleyin
Roo Code: Symlink-bypass of .rooignore can lead to unintended file disclosure
OrtaCVSS 6,5İstismar yokEPSS %0roocode · roo code5 Eyl 2025