Vulnerabilidades en RooCodeInc
19 resultadosAnálisis Vexday
RooCodeInc apresenta 12 vulnerabilidades catalogadas, com 1 crítica e nenhuma sob exploração ativa conhecida, reduzindo a urgência imediata de mitigação. A fraqueza dominante é injeção de comando (CWE-78), indicando falhas em validação de entrada, enquanto apenas 1 vulnerabilidade foi publicada nos últimos 90 dias sugere risco estabilizado e não em escalada.
CVE-2026-63108HIGHRoo Code 3.54.0 Command Injection via Parameter Expansion ParsingEPSS 1.8%CVE-2025-54377HIGHRoo Code Lacks Line Break Validation in its Command Execution ToolEPSS 1.1%CVE-2025-58371CRITICALRoo Code is vulnerable to command injection via GitHub actions workflowEPSS 0.8%CVE-2025-57771HIGHRoo-Code potential remote code execution via auto-execute command parsing flawEPSS 0.7%CVE-2025-65946HIGHRoo Code is Vulnerable to Potential Remote Code Execution via zsh Command Validation BugEPSS 0.7%CVE-2025-53536HIGHRoo Code allows Potential Remote Code Execution via .vscode/settings.jsonEPSS 0.7%CVE-2025-53098HIGHRoo Code Vulnerable to Potential Remote Code Execution via Model Context ProtocolEPSS 0.6%CVE-2025-58372HIGHRoo Code: Potential Remote Code Execution via .code-workspaceEPSS 0.5%CVE-2025-53097MEDIUMRoo Code extension vulnerable to Potential Information Leakage via JSON SchemaEPSS 0.5%CVE-2025-58370HIGHRoo Code: Potential Remote Code Execution via Bash Parameter Expansion and Indirect ReferenceEPSS 0.4%CVE-2026-81837MEDIUMRooCodeInc Roo-Code ApplyPatchTool ApplyPatchTool.ts path.resolve path traversalEPSS 0.3%CVE-2026-82536HIGHRoo-Code 3.54.0 Auto-Approve Bypass via Shell Command Pipe OperatorEPSS 0.3%CVE-2025-58373MEDIUMRoo Code: Symlink-bypass of .rooignore can lead to unintended file disclosureEPSS 0.3%CVE-2026-82537HIGHRoo-Code 3.54.0 Auto-Approve Bypass via Shell Parser Word-Boundary MismatchEPSS 0.3%CVE-2026-81834MEDIUMRooCodeInc Roo-Code README File ExecaTerminalProcess code injectionEPSS 0.2%CVE-2025-58374HIGHRoo Code: Auto-approve allows npm install execution of malicious postinstall scriptsEPSS 0.2%CVE-2026-81836MEDIUMRooCodeInc Roo-Code OAuth Callback oauth.ts cleartext transmissionEPSS 0.2%CVE-2026-81833MEDIUMRooCodeInc Roo-Code CodeIndexManager helpers.ts optimizeQuery code injectionEPSS 0.2%CVE-2026-81835MEDIUMRooCodeInc Roo-Code MCP Integration Trust Model malicious_mcp_server.py fetch_instructions code injectionEPSS 0.2%