EUVD-2026-67286

A flaw has been found in RooCodeInc Roo-Code up to 3.51.1. This issue affects the function path.resolve of the file src/core/tools/ApplyPatchTool.ts of the component ApplyPatchTool. This manipulation causes path traversal. It is possible to initiate the attack remotely. The exploit has been...

EUVD-2026-67313

A security vulnerability has been detected in RooCodeInc Roo-Code up to 3.51.1. This affects the function fetchinstructions of the file maliciousmcpserver.py of the component MCP Integration Trust Model. The manipulation leads to code injection. The attack is possible to be carried out remotely...

EUVD-2026-67279

A vulnerability was detected in RooCodeInc Roo-Code up to 3.51.1. This vulnerability affects unknown code of the file src/integrations/claude-code/oauth.ts of the component OAuth Callback. The manipulation results in cleartext transmission of sensitive information. The attack may be performed fro...

CVE-2026-81837

A path traversal vulnerability affects RooCodeInc Roo-Code versions up to 3.51.1 , specifically in the path.resolve function within src/core/tools/ApplyPatchTool.ts . The flaw allows remote exploitation with low complexity and no required privileges, though user interaction is needed. A proof-of-...

CVE-2026-81836

A vulnerability in RooCodeInc Roo-Code (up to version 3.51.1) affects the OAuth Callback component in the file src/integrations/claude-code/oauth.ts, where sensitive information is transmitted in cleartext. The attack is remote with no required authentication but carries high complexity . A proof...

CVE-2026-81835

RooCodeInc Roo-Code (up to version 3.51.1 ) is vulnerable to code injection via the fetch_instructions function in malicious_mcp_server.py, part of the MCP Integration Trust Model component. The attack can be carried out remotely with low complexity and low privileges, requiring user interaction....

CVE-2026-81834

A code injection vulnerability exists in RooCodeInc Roo-Code (versions up to 3.51.1 ), specifically in the ExecaTerminalProcess function within the README File Handler component. The flaw allows remote attackers to inject code by manipulating this function. A public proof-of-concept exploit is av...

EUVD-2026-67231

A weakness has been identified in RooCodeInc Roo-Code up to 3.51.1. Affected by this issue is the function ExecaTerminalProcess of the component README File Handler. Executing a manipulation can lead to code injection. The attack can be executed remotely. The exploit has been made available to th...

CVE-2026-81833

Roo-Code (RooCodeInc) up to version 3.51.1 is affected by a code injection vulnerability in the optimizeQuery function within src/utils/helpers.ts of the CodeIndexManager component. Manipulation of this function allows remote code injection with low impact on confidentiality, integrity, and avail...

EUVD-2026-67228

A security flaw has been discovered in RooCodeInc Roo-Code up to 3.51.1. Affected by this vulnerability is the function optimizeQuery of the file src/utils/helpers.ts of the component CodeIndexManager. Performing a manipulation results in code injection. Remote exploitation of the attack is...

PT-2026-82803

A flaw has been found in RooCodeInc Roo-Code up to 3.51.1. This issue affects the function path.resolve of the file src/core/tools/ApplyPatchTool.ts of the component ApplyPatchTool. This manipulation causes path traversal. It is possible to initiate the attack remotely. The exploit has been...

PT-2026-82802

A vulnerability was detected in RooCodeInc Roo-Code up to 3.51.1. This vulnerability affects unknown code of the file src/integrations/claude-code/oauth.ts of the component OAuth Callback. The manipulation results in cleartext transmission of sensitive information. The attack may be performed fro...

PT-2026-82801

A security vulnerability has been detected in RooCodeInc Roo-Code up to 3.51.1. This affects the function fetch instructions of the file malicious mcp server.py of the component MCP Integration Trust Model. The manipulation leads to code injection. The attack is possible to be carried out remotel...

CVE-2026-63108

Roo Code through 3.54.0 contains a command injection vulnerability in the auto-approve execute feature that allows attackers to bypass allowlist/denylist enforcement by nesting command substitutions inside parameter expansion defaults. The command parser in parse-command.ts replaces parameter...

CVE-2026-63108 Roo Code 3.54.0 Command Injection via Parameter Expansion Parsing

Roo Code through 3.54.0 contains a command injection vulnerability in the auto-approve execute feature that allows attackers to bypass allowlist/denylist enforcement by nesting command substitutions inside parameter expansion defaults. The command parser in parse-command.ts replaces parameter...

CVE-2026-63108

Roo Code up to 3.54.0 contains a command injection via the auto-approve execute feature. The vulnerability arises because the command parser in parse-command.ts replaces parameter expansions with opaque placeholders before extracting command substitutions, causing the containsDangerousSubstitutio...

CVE-2026-30307

Roo Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective. The system relies on fragile regular expressions to parse command structures; while it attempts to intercept dangerous operations, i...

EUVD-2026-17188

Roo Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective. The system relies on fragile regular expressions to parse command structures; while it attempts to intercept dangerous operations, i...

CVE-2026-30307

Summary: CVE-2026-30307 affects Roo Code’s command auto-approval module. The vulnerability stems from parsing command structures with fragile regular expressions that do not account for Shell command substitution (e.g., $(...) and backticks). An attacker can craft a command like: git log --grep="...

CVE-2026-30307

Roo Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective. The system relies on fragile regular expressions to parse command structures; while it attempts to intercept dangerous operations, i...