VYPR
← All advisories
High severity8.1NVD Advisory· Published Nov 21, 2025· Updated Jun 17, 2026

CVE-2025-65946

CVE-2025-65946

Description

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Prior to version 3.26.7, Due to an error in validation it was possible for Roo to automatically execute commands that did not match the allow list prefixes. This issue has been patched in version 3.26.7.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • RooCodeInc/Roo Code3 versions
    cpe:2.3:a:roocode:roo_code:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:roocode:roo_code:*:*:*:*:*:*:*:*range: <3.26.7
    • (no CPE)range: <3.26.7
    • (no CPE)range: < 3.26.7
  • Roo Code/RooCodellm-fuzzy
    Range: <3.26.7

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.