Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-65946

Опубликовано: 21 нояб. 2025
Источник: nvd
CVSS3: 8.1
EPSS Низкий

Описание

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Prior to version 3.26.7, Due to an error in validation it was possible for Roo to automatically execute commands that did not match the allow list prefixes. This issue has been patched in version 3.26.7.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:roocode:roo_code:*:*:*:*:*:*:*:*
Версия до 3.26.7 (исключая)

EPSS

Процентиль: 38%
0.00168
Низкий

8.1 High

CVSS3

Дефекты

CWE-20
CWE-77

EPSS

Процентиль: 38%
0.00168
Низкий

8.1 High

CVSS3

Дефекты

CWE-20
CWE-77