CVE-2025-58370

Roo Code: Potential Remote Code Execution via Bash Parameter Expansion and Indirect Reference

State: Published
Severity: 8.1 High
Published: Sep 5, 2025
Updated: Sep 8, 2025
Reserved: Aug 29, 2025

Description

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Versions below 3.26.0 contain a vulnerability in the command parsing logic where the Bash parameter expansion and indirect reference were not handled correctly. If the agent was configured to auto-approve execution of certain commands, an attacker able to influence prompts could abuse this weakness to execute additional arbitrary commands alongside the intended one. This is fixed in version 3.26.0.

Scores

CVSS	Score	Vector	Source
3.1	8.1 High	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	GitHub_M

Weaknesses

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected Products

Product	Versions
Roo-CodeRooCodeInc	< 3.26.0Affected

References

https://github.com/RooCodeInc/Roo-Code/security/advisories/GHSA-2rm5-cvcm-7592

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.