Skip to content
OpenAdvisories

Product · RooCodeInc

Roo-Code

24 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.9
    CVE-2025-58371 Public exploit

    Roo Code is vulnerable to command injection via GitHub actions workflow

    Roo Code is an AI-powered autonomous coding agent that lives in users' editors. In versions 3.26.6 and below, a Github workflow used unsanitized pull request metadata in a privileged context, allowing an attacker to craft malicious input and achieve Remote Co…

    RooCodeInc Roo-Code