CVE-2025-65946

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Prior to version 3.26.7, Due to an error in validation it was possible for Roo to automatically execute commands that did not match the allow list prefixes. This issue has been patched in version 3.26.7.

CVSS v3 8.1 HIGH

8.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/RooCodeInc/Roo-Code/commit/b50104cc5987ce64f5154309d967ae8c74cfd1f3	Patch
https://github.com/RooCodeInc/Roo-Code/pull/7667	Issue Tracking
https://github.com/RooCodeInc/Roo-Code/security/advisories/GHSA-hwm7-w97p-4h8p	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:roocode:roo_code:*:*:*:*:*:*:*:*

History

18 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Roo Code es un agente de codificación autónomo impulsado por IA que reside en los editores de los usuarios. Versiones anteriores a la versión 3.26.7, debido a un error de validación, era posible que Roo ejecutara automáticamente comandos que no coincidían con los prefijos de la lista de permitidos. Este problema ha sido parcheado en la versión 3.26.7.

Information

Published : 2025-11-21 23:15

Updated : 2026-10-18 20:10

NVD link : CVE-2025-65946

Mitre link : CVE-2025-65946

CVE.ORG link : CVE-2025-65946

JSON object : View

Products Affected

roocode

roo_code

CWE

CWE-20

Improper Input Validation

CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

{"id": "CVE-2025-65946", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-65946", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-11-25T18:56:25.249260Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.2}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "RooCodeInc", "product": "Roo-Code", "versions": [{"status": "affected", "version": "< 3.26.7"}]}]}], "published": "2025-11-21T23:15:45.170", "references": [{"url": "https://github.com/RooCodeInc/Roo-Code/commit/b50104cc5987ce64f5154309d967ae8c74cfd1f3", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/RooCodeInc/Roo-Code/pull/7667", "tags": ["Issue Tracking"], "source": "security-advisories@github.com"}, {"url": "https://github.com/RooCodeInc/Roo-Code/security/advisories/GHSA-hwm7-w97p-4h8p", "tags": ["Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-20"}, {"lang": "en", "value": "CWE-77"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-77"}]}], "descriptions": [{"lang": "en", "value": "Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Prior to version 3.26.7, Due to an error in validation it was possible for Roo to automatically execute commands that did not match the allow list prefixes. This issue has been patched in version 3.26.7."}, {"lang": "es", "value": "Roo Code es un agente de codificaci\u00f3n aut\u00f3nomo impulsado por IA que reside en los editores de los usuarios. Versiones anteriores a la versi\u00f3n 3.26.7, debido a un error de validaci\u00f3n, era posible que Roo ejecutara autom\u00e1ticamente comandos que no coincid\u00edan con los prefijos de la lista de permitidos. Este problema ha sido parcheado en la versi\u00f3n 3.26.7."}], "lastModified": "2026-10-18T20:10:00.110", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:roocode:roo_code:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4BCA2678-F80F-4370-9C08-59C3FAA651DC", "versionEndExcluding": "3.26.7"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}