CVE-2025-54377

creationtimestamp| type| source ---|---|--- 2025-07-24 00:58:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luoddpdtyz22 2026-03-17 07:30:05+00:00| seen| https://bsky.app/profile/nerq-ai.bsky.social/post/3mhahavtunb2g...

CVE-2025-54377 Roo Code Lacks Line Break Validation in its Command Execution Tool

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. In versions 3.23.18 and below, RooCode does not validate line breaks \n in its command input, allowing potential bypass of the allow-list mechanism. The project appears to lack parsing or validation logic to prevent...