Vulnerabilidades en RooCodeInc

24 resultados
CVE-2026-63108HIGHRoo Code 3.54.0 Command Injection via Parameter Expansion ParsingEPSS 1.8%CVE-2025-58371CRITICALRoo Code is vulnerable to command injection via GitHub actions workflowEPSS 1.5%CVE-2025-54377HIGHRoo Code Lacks Line Break Validation in its Command Execution ToolEPSS 1.1%CVE-2025-53536HIGHRoo Code allows Potential Remote Code Execution via .vscode/settings.jsonEPSS 0.8%CVE-2025-57771HIGHRoo-Code potential remote code execution via auto-execute command parsing flawEPSS 0.7%CVE-2025-65946HIGHRoo Code is Vulnerable to Potential Remote Code Execution via zsh Command Validation BugEPSS 0.7%CVE-2025-53098HIGHRoo Code Vulnerable to Potential Remote Code Execution via Model Context ProtocolEPSS 0.7%CVE-2025-58372HIGHRoo Code: Potential Remote Code Execution via .code-workspaceEPSS 0.6%CVE-2026-82536HIGHRoo-Code 3.54.0 Auto-Approve Bypass via Shell Command Pipe OperatorEPSS 0.5%CVE-2026-110203HIGHRoo-Code through 3.54.0 Auto-Approve Bypass via Quote Masking DesynchronizationEPSS 0.5%CVE-2026-110204HIGHRoo-Code through 3.54.0 Auto-Approve Bypass via Funsub Command SubstitutionEPSS 0.5%CVE-2026-110206HIGHRoo-Code through 3.54.0 Auto-Approve Bypass via Command Substitution at Command PositionEPSS 0.5%CVE-2026-110205HIGHRoo-Code through 3.54.0 Auto-Approve Bypass via Glob Token Discarding Command SubstitutionEPSS 0.5%CVE-2025-53097MEDIUMRoo Code extension vulnerable to Potential Information Leakage via JSON SchemaEPSS 0.5%CVE-2026-81837MEDIUMRooCodeInc Roo-Code ApplyPatchTool ApplyPatchTool.ts path.resolve path traversalEPSS 0.5%CVE-2026-82537HIGHRoo-Code 3.54.0 Auto-Approve Bypass via Shell Parser Word-Boundary MismatchEPSS 0.5%CVE-2025-58370HIGHRoo Code: Potential Remote Code Execution via Bash Parameter Expansion and Indirect ReferenceEPSS 0.4%CVE-2026-110202HIGHRoo-Code through 3.54.0 Auto-Approve Bypass via Redirect Operator StrippingEPSS 0.4%CVE-2026-81834MEDIUMRooCodeInc Roo-Code README File ExecaTerminalProcess code injectionEPSS 0.4%CVE-2025-58373MEDIUMRoo Code: Symlink-bypass of .rooignore can lead to unintended file disclosureEPSS 0.3%