Login Request a demo
RO
Product
Roo-Code
by RooCodeInc · last CVE Oct 13, 2026
13
CVEs
0
On KEV
8.8
Max CVSS
5
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 0High 8Medium 4Low 1
Severity
All severities13Critical0High8Medium4Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Roo-Code to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-110206
8.8
1%
Oct 13
Roo-Code through 3.54.0 Auto-Approve Bypass via Command Substitution at Command Position
Affected: through 3.54.0
CVE-2026-110205
8.8
1%
Oct 13
Roo-Code through 3.54.0 Auto-Approve Bypass via Glob Token Discarding Command Substitution
Affected: through 3.54.0
CVE-2026-110204
8.8
1%
Oct 13
Roo-Code through 3.54.0 Auto-Approve Bypass via Funsub Command Substitution
Affected: through 3.54.0
CVE-2026-110203
8.8
1%
Oct 13
Roo-Code through 3.54.0 Auto-Approve Bypass via Quote Masking Desynchronization
Affected: through 3.54.0
CVE-2026-110202
8.8
0%
Oct 13
Roo-Code through 3.54.0 Auto-Approve Bypass via Redirect Operator Stripping
Affected: through 3.54.0
CVE-2026-82537
8.8
0%
Sep 8
Roo-Code 3.54.0 Auto-Approve Bypass via Shell Parser Word-Boundary Mismatch
Affected: through 3.54.0
CVE-2026-82536
8.8
1%
Sep 8
Roo-Code 3.54.0 Auto-Approve Bypass via Shell Command Pipe Operator
Affected: through 3.54.0
CVE-2026-63108
8.8
2%
Jul 20
Roo Code 3.54.0 Command Injection via Parameter Expansion Parsing
Affected: through 3.54.0
Showing 8