Login Request a demo
RC
Product
Roo Code
by Roocode · last CVE Oct 13, 2026
16
CVEs
0
On KEV
9.8
Max CVSS
5
New 30D
Vulnerabilities16In the news0Timeline
Severity mix
Critical 3High 12Medium 1Low 0
Severity
All severities16Critical3High12Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Roo Code to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-110206
8.8
1%
Oct 13
Roo-Code through 3.54.0 Auto-Approve Bypass via Command Substitution at Command Position
Affected: through 3.54.0
CVE-2026-110205
8.8
1%
Oct 13
Roo-Code through 3.54.0 Auto-Approve Bypass via Glob Token Discarding Command Substitution
Affected: through 3.54.0
CVE-2026-110204
8.8
1%
Oct 13
Roo-Code through 3.54.0 Auto-Approve Bypass via Funsub Command Substitution
Affected: through 3.54.0
CVE-2026-110203
8.8
1%
Oct 13
Roo-Code through 3.54.0 Auto-Approve Bypass via Quote Masking Desynchronization
Affected: through 3.54.0
CVE-2026-110202
8.8
0%
Oct 13
Roo-Code through 3.54.0 Auto-Approve Bypass via Redirect Operator Stripping
Affected: through 3.54.0
CVE-2025-65946
8.1
1%
Nov 21
Roo Code is an AI-powered autonomous coding agent that lives in users' editors
Affected: before 3.26.7
CVE-2025-58370
8.1
0%
Sep 5
Roo Code is an AI-powered autonomous coding agent that lives in users' editors
Affected: before 3.26.0
CVE-2025-53536
8.1
1%
Jul 7
Roo Code is an AI-powered autonomous coding agent
Affected: before 3.22.6
CVE-2025-53098
8.1
1%
Jun 27
Roo Code is an AI-powered autonomous coding agent
Affected: before 3.20.3
CVE-2025-58374
7.8
0%
Sep 6
Roo Code is an AI-powered autonomous coding agent that lives in users' editors
Affected: before 3.26.0
CVE-2025-54377
7.8
1%
Jul 23
Roo Code is an AI-powered autonomous coding agent that lives in users' editors
Affected: before 3.23.19
CVE-2025-53097
7.5
0%
Jun 27
Roo Code is an AI-powered autonomous coding agent
Affected: before 3.20.3
Showing 12