Roo Code is Vulnerable to Potential Remote Code Execution via zsh Command Validation Bug
Priority LOW 38CWE-20Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-77.
Summary
Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Prior to version 3.26.7, Due to an error in validation it was possible for Roo to automatically execute commands that did not match the allow list prefixes. This issue has been patched in version 3.26.7.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00707 53rd percentileScored 2026-11-07
Fix Fixed Roo-Code (RooCodeInc): 3.26.7
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| RooCodeInc | Roo-Code | before 3.26.7 | 3.26.7 | Patch available | CNA |
- Roo-Code VendorRooCodeInc Affected before 3.26.7 Fixed in 3.26.7 Patch available CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:roocode:roo_code:*:*:*:*:*:*:*:* | before 3.26.7 | Vulnerable | RooCodeInc |
- cpe:2.3:a:roocode:roo_code:*:*:*:*:*:*:*:* Versions before 3.26.7 Vulnerable ·RooCodeInc
Remediation
- Fix · CNA Roo-Code (RooCodeInc) Fixed in 3.26.7
Timeline
- 2026-10-02 Threatist record created from CVE-2025-65946
- 2026-10-09 EPSS moved to the 50th–90th percentile
References
More RooCodeInc Roo Code vulnerabilities
- TI-2026-73422 Auto-approve bypass in Roo-Code via glob and command substitution CVSS 4.0HIGH 7.7
- TI-2026-73421 Auto-approve bypass in Roo-Code runs denied shell commands CVSS 4.0HIGH 7.7
- TI-2026-73419 Auto-approve bypass in Roo-Code via redirect operator stripping CVSS 4.0HIGH 7.7
- TI-2025-34186 Roo Code Lacks Line Break Validation in its Command Execution Tool CVSS 3.1HIGH 7.8
- TI-2025-36158 Roo Code is vulnerable to command injection via GitHub actions workflow CVSS 4.0CRITICAL 9.9
- TI-2026-23506 Roo Code's command auto-approval module contains a critical OS command injection… CVSS 3.1CRITICAL 9.8
Sources
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences