CVE-2025-65946

Published November 21st, 2025

View on NVD ↗

CVSS v3

8.1

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Prior to version 3.26.7, Due to an error in validation it was possible for Roo to automatically execute commands that did not match the allow list prefixes. This issue has been patched in version 3.26.7.

RooCodeInc/Roo-Code

Roo Code gives you a whole dev team of AI agents in your code editor.

GitHub

24.2K