Vulnerabilities in RooCodeInc
24 resultsCVE-2026-81835MEDIUMRooCodeInc Roo-Code MCP Integration Trust Model malicious_mcp_server.py fetch_instructions code injectionEPSS 0.3%CVE-2026-81833MEDIUMRooCodeInc Roo-Code CodeIndexManager helpers.ts optimizeQuery code injectionEPSS 0.3%CVE-2026-81836MEDIUMRooCodeInc Roo-Code OAuth Callback oauth.ts cleartext transmissionEPSS 0.3%CVE-2025-58374HIGHRoo Code: Auto-approve allows npm install execution of malicious postinstall scriptsEPSS 0.2%