RO
Vendor
RooCodeInc
13
CVEs
0
On KEV
5
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-110206 | RO Roo-Code RooCodeInc | 8.8 | Oct 13 | Roo-Code through 3.54.0 Auto-Approve Bypass via Command Substitution at Command Position |
| CVE-2026-110205 | RO Roo-Code RooCodeInc | 8.8 | Oct 13 | Roo-Code through 3.54.0 Auto-Approve Bypass via Glob Token Discarding Command Substitution |
| CVE-2026-110204 | RO Roo-Code RooCodeInc | 8.8 | Oct 13 | Roo-Code through 3.54.0 Auto-Approve Bypass via Funsub Command Substitution |
| CVE-2026-110203 | RO Roo-Code RooCodeInc | 8.8 | Oct 13 | Roo-Code through 3.54.0 Auto-Approve Bypass via Quote Masking Desynchronization |
| CVE-2026-110202 | RO Roo-Code RooCodeInc | 8.8 | Oct 13 | Roo-Code through 3.54.0 Auto-Approve Bypass via Redirect Operator Stripping |
| CVE-2026-82537 | RO Roo-Code RooCodeInc | 8.8 | Sep 8 | Roo-Code 3.54.0 Auto-Approve Bypass via Shell Parser Word-Boundary Mismatch |
| CVE-2026-82536 | RO Roo-Code RooCodeInc | 8.8 | Sep 8 | Roo-Code 3.54.0 Auto-Approve Bypass via Shell Command Pipe Operator |
| CVE-2026-81837 | RO Roo-Code RooCodeInc | 6.3 | Aug 27 | RooCodeInc Roo-Code ApplyPatchTool ApplyPatchTool.ts path.resolve path traversal |
| CVE-2026-81836 | RO Roo-Code RooCodeInc | 3.7 | Aug 27 | RooCodeInc Roo-Code OAuth Callback oauth.ts cleartext transmission |
| CVE-2026-81835 | RO Roo-Code RooCodeInc | 5.5 | Aug 27 | RooCodeInc Roo-Code MCP Integration Trust Model malicious_mcp_server.py fetch_instructions code injection |
| CVE-2026-81834 | RO Roo-Code RooCodeInc | 6.3 | Aug 27 | RooCodeInc Roo-Code README File ExecaTerminalProcess code injection |
| CVE-2026-81833 | RO Roo-Code RooCodeInc | 5.5 | Aug 27 | RooCodeInc Roo-Code CodeIndexManager helpers.ts optimizeQuery code injection |
| CVE-2026-63108 | RO Roo-Code RooCodeInc | 8.8 | Jul 20 | Roo Code 3.54.0 Command Injection via Parameter Expansion Parsing |