CNNVD-202511-2412 Information
Nov 21, 2025
cve
CNNVD ID
CNNVD-202511-2412
Related CVE
- CNNVD Published: 2025-11-21
Description (Chinese)
Roo Code是Roo Code公司的一款基于AI的自主编码代理。 Roo Code 3.26.7之前版本存在命令注入漏洞，该漏洞源于验证错误，可能导致执行未授权的命令。
Description (English)
Roo Code is an AI-based autonomous coding agent for Roo Code. Roo Code 3.26.7 had an order-infusion loophole that arose from a certification error that could lead to the execution of unauthorized orders.
Hazard Level
Medium
Vulnerability Type
命令注入
Affected Vendor
Roo Code
Published
2025-11-21
Last Modified
2026-02-24
References
https://github.com/RooCodeInc/Roo-Code/commit/b50104cc5987ce64f5154309d967ae8c74cfd1f3 https://github.com/RooCodeInc/Roo-Code/pull/7667 https://github.com/RooCodeInc/Roo-Code/security/advisories/GHSA-hwm7-w97p-4h8p https://access.redhat.com/security/cve/cve-2025-65946
Patch
https://github.com/RooCodeInc/Roo-Code/releases
Share on: