agentprime: roocodeinc-roo-codeEvery new CVE for roocodeinc-roo-code.https://agentprime.io/CVE-2026-110206: Roo-Code through 3.54.0 Auto-Approve Bypass via Command Substitution at Command Positionhttps://agentprime.io/advisories/CVE-2026-110206/https://agentprime.io/advisories/CVE-2026-110206/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 18:49:58 GMTCVECVE-2026-110205: Roo-Code through 3.54.0 Auto-Approve Bypass via Glob Token Discarding Command Substitutionhttps://agentprime.io/advisories/CVE-2026-110205/https://agentprime.io/advisories/CVE-2026-110205/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 18:49:57 GMTCVECVE-2026-110204: Roo-Code through 3.54.0 Auto-Approve Bypass via Funsub Command Substitutionhttps://agentprime.io/advisories/CVE-2026-110204/https://agentprime.io/advisories/CVE-2026-110204/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 18:49:56 GMTCVECVE-2026-110203: Roo-Code through 3.54.0 Auto-Approve Bypass via Quote Masking Desynchronizationhttps://agentprime.io/advisories/CVE-2026-110203/https://agentprime.io/advisories/CVE-2026-110203/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 18:49:56 GMTCVECVE-2026-110202: Roo-Code through 3.54.0 Auto-Approve Bypass via Redirect Operator Strippinghttps://agentprime.io/advisories/CVE-2026-110202/https://agentprime.io/advisories/CVE-2026-110202/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 18:49:55 GMTCVECVE-2026-82537: Roo-Code 3.54.0 Auto-Approve Bypass via Shell Parser Word-Boundary Mismatchhttps://agentprime.io/advisories/CVE-2026-82537/https://agentprime.io/advisories/CVE-2026-82537/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 18:17:34 GMTCVECVE-2026-82536: Roo-Code 3.54.0 Auto-Approve Bypass via Shell Command Pipe Operatorhttps://agentprime.io/advisories/CVE-2026-82536/https://agentprime.io/advisories/CVE-2026-82536/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 18:17:06 GMTCVECVE-2026-81837: RooCodeInc Roo-Code ApplyPatchTool ApplyPatchTool.ts path.resolve path traversalhttps://agentprime.io/advisories/CVE-2026-81837/https://agentprime.io/advisories/CVE-2026-81837/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 21:30:11 GMTCVECVE-2026-81836: RooCodeInc Roo-Code OAuth Callback oauth.ts cleartext transmissionhttps://agentprime.io/advisories/CVE-2026-81836/https://agentprime.io/advisories/CVE-2026-81836/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 21:15:08 GMTCVECVE-2026-81835: RooCodeInc Roo-Code MCP Integration Trust Model malicious_mcp_server.py fetch_instructions code injectionhttps://agentprime.io/advisories/CVE-2026-81835/https://agentprime.io/advisories/CVE-2026-81835/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 20:45:10 GMTCVECVE-2026-81834: RooCodeInc Roo-Code README File ExecaTerminalProcess code injectionhttps://agentprime.io/advisories/CVE-2026-81834/https://agentprime.io/advisories/CVE-2026-81834/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 20:00:08 GMTCVECVE-2026-81833: RooCodeInc Roo-Code CodeIndexManager helpers.ts optimizeQuery code injectionhttps://agentprime.io/advisories/CVE-2026-81833/https://agentprime.io/advisories/CVE-2026-81833/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 19:45:10 GMTCVECVE-2026-63108: Roo Code 3.54.0 Command Injection via Parameter Expansion Parsinghttps://agentprime.io/advisories/CVE-2026-63108/https://agentprime.io/advisories/CVE-2026-63108/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 18:24:14 GMTCVECVE-2025-65946: Roo Code is Vulnerable to Potential Remote Code Execution via zsh Command Validation Bughttps://agentprime.io/advisories/CVE-2025-65946/https://agentprime.io/advisories/CVE-2025-65946/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Nov 2025 22:11:12 GMTCVECVE-2025-58374: Roo Code: Auto-approve allows npm install execution of malicious postinstall scriptshttps://agentprime.io/advisories/CVE-2025-58374/https://agentprime.io/advisories/CVE-2025-58374/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 06 Sep 2025 02:19:40 GMTCVECVE-2025-58373: Roo Code: Symlink-bypass of .rooignore can lead to unintended file disclosurehttps://agentprime.io/advisories/CVE-2025-58373/https://agentprime.io/advisories/CVE-2025-58373/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Sep 2025 22:55:54 GMTCVECVE-2025-58372: Roo Code: Potential Remote Code Execution via .code-workspacehttps://agentprime.io/advisories/CVE-2025-58372/https://agentprime.io/advisories/CVE-2025-58372/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Sep 2025 22:51:01 GMTCVECVE-2025-58371: Roo Code is vulnerable to command injection via GitHub actions workflowhttps://agentprime.io/advisories/CVE-2025-58371/https://agentprime.io/advisories/CVE-2025-58371/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Sep 2025 22:42:59 GMTCVEcriticalCVE-2025-58370: Roo Code: Potential Remote Code Execution via Bash Parameter Expansion and Indirect Referencehttps://agentprime.io/advisories/CVE-2025-58370/https://agentprime.io/advisories/CVE-2025-58370/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Sep 2025 22:09:04 GMTCVECVE-2025-57771: Roo-Code potential remote code execution via auto-execute command parsing flawhttps://agentprime.io/advisories/CVE-2025-57771/https://agentprime.io/advisories/CVE-2025-57771/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 22 Aug 2025 16:35:47 GMTCVECVE-2025-54377: Roo Code Lacks Line Break Validation in its Command Execution Toolhttps://agentprime.io/advisories/CVE-2025-54377/https://agentprime.io/advisories/CVE-2025-54377/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Jul 2025 20:36:01 GMTCVECVE-2025-53536: Roo Code allows Potential Remote Code Execution via .vscode/settings.jsonhttps://agentprime.io/advisories/CVE-2025-53536/https://agentprime.io/advisories/CVE-2025-53536/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Jul 2025 17:57:36 GMTCVECVE-2025-53098: Roo Code Vulnerable to Potential Remote Code Execution via Model Context Protocolhttps://agentprime.io/advisories/CVE-2025-53098/https://agentprime.io/advisories/CVE-2025-53098/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Jun 2025 21:43:35 GMTCVECVE-2025-53097: Roo Code extension vulnerable to Potential Information Leakage via JSON Schemahttps://agentprime.io/advisories/CVE-2025-53097/https://agentprime.io/advisories/CVE-2025-53097/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Jun 2025 21:43:31 GMTCVE