Login Request a demo
RO
Product
Roo-Code
by RooCodeInc · last CVE Oct 13, 2026
13
CVEs
0
On KEV
8.8
Max CVSS
5
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 0High 8Medium 4Low 1
Severity
All severities13Critical0High8Medium4Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Roo-Code to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-110206
8.8
1%
Oct 13
Roo-Code through 3.54.0 Auto-Approve Bypass via Command Substitution at Command Position
Affected: through 3.54.0
CVE-2026-110205
8.8
1%
Oct 13
Roo-Code through 3.54.0 Auto-Approve Bypass via Glob Token Discarding Command Substitution
Affected: through 3.54.0
CVE-2026-110204
8.8
1%
Oct 13
Roo-Code through 3.54.0 Auto-Approve Bypass via Funsub Command Substitution
Affected: through 3.54.0
CVE-2026-110203
8.8
1%
Oct 13
Roo-Code through 3.54.0 Auto-Approve Bypass via Quote Masking Desynchronization
Affected: through 3.54.0
CVE-2026-110202
8.8
0%
Oct 13
Roo-Code through 3.54.0 Auto-Approve Bypass via Redirect Operator Stripping
Affected: through 3.54.0
CVE-2026-82537
8.8
0%
Sep 8
Roo-Code 3.54.0 Auto-Approve Bypass via Shell Parser Word-Boundary Mismatch
Affected: through 3.54.0
CVE-2026-82536
8.8
1%
Sep 8
Roo-Code 3.54.0 Auto-Approve Bypass via Shell Command Pipe Operator
Affected: through 3.54.0
CVE-2026-63108
8.8
2%
Jul 20
Roo Code 3.54.0 Command Injection via Parameter Expansion Parsing
Affected: through 3.54.0
CVE-2026-81837
6.3
0%
Aug 27
RooCodeInc Roo-Code ApplyPatchTool ApplyPatchTool.ts path.resolve path traversal
Affected: 3.51.0; 3.51.1
CVE-2026-81834
6.3
0%
Aug 27
RooCodeInc Roo-Code README File ExecaTerminalProcess code injection
Affected: 3.51.0; 3.51.1
CVE-2026-81835
5.5
0%
Aug 27
RooCodeInc Roo-Code MCP Integration Trust Model malicious_mcp_server.py fetch_instructions code injection
Affected: 3.51.0; 3.51.1
CVE-2026-81833
5.5
0%
Aug 27
RooCodeInc Roo-Code CodeIndexManager helpers.ts optimizeQuery code injection
Affected: 3.51.0; 3.51.1
CVE-2026-81836
3.7
0%
Aug 27
RooCodeInc Roo-Code OAuth Callback oauth.ts cleartext transmission
Affected: 3.51.0; 3.51.1
Showing 13