{"data":{"id":"b6fe092a-23b0-4b92-afb1-36cf6e49c5e2","title":"CVE-2025-58372: Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Versions 3.25.23 and below contain a…","summary":"Roo Code, an AI-powered autonomous coding agent for editors, versions 3.25.23 and below, does not protect VS Code .code-workspace files the way it protects the .vscode folder. If the agent auto-approves file writes, an attacker who can influence its prompts, for example through prompt injection, can have malicious workspace settings or tasks written. Those tasks run automatically when the workspace is reopened, leading to arbitrary code execution.","solution":"Fixed in version 3.26.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-58372","publishedAt":"2025-09-05T23:15:30.647Z","cveId":"CVE-2025-58372","cweIds":["CWE-94","CWE-732"],"cvssScore":"8.1","cvssSeverity":"high","severity":"high","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Roo Code"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Roo Code arbitrary code execution via unprotected .code-workspace files","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00531,"epssCheckedAt":"2026-11-04T12:08:35.508Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-04T12:08:51.595Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-1","CAPEC-242"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.93,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[]}}