{"data":{"id":"852b6fbf-5114-4105-8d89-2d6b1448bb9a","title":"CVE-2025-53536: Roo Code is an AI-powered autonomous coding agent. Prior to 3.22.6, if the victim had \"Write\" auto-approved, an…","summary":"CVE-2025-53536 affects Roo Code, an AI-powered autonomous coding agent, prior to 3.22.6. When the victim had \"Write\" auto-approved, an attacker able to submit prompts to the agent could write to VS Code settings files and trigger code execution. One example uses the php.validate.executablePath setting, where the attacker sets an arbitrary command as the PHP path and then creates a PHP file to trigger it.","solution":"Fixed in 3.22.6.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-53536","publishedAt":"2025-07-07T18:15:28.980Z","cveId":"CVE-2025-53536","cweIds":["CWE-552"],"cvssScore":"8.1","cvssSeverity":"high","severity":"high","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Roo Code"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Roo Code code execution via auto-approved Write to VS Code settings","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00774,"epssCheckedAt":"2026-11-04T12:08:33.690Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-28T18:09:30.734Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[]}}