{"data":{"id":"d1be35c6-41c1-461f-96c9-93be58162abf","title":"CVE-2025-58370: Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Versions below 3.26.0 contain a…","summary":"CVE-2025-58370 affects Roo Code, an AI-powered autonomous coding agent, in versions below 3.26.0. The command parsing logic mishandles Bash parameter expansion and indirect references, so when the agent is configured to auto-approve certain commands, an attacker who can influence prompts can get additional arbitrary commands executed alongside the intended one. The weakness is classified as CWE-78, OS Command Injection.","solution":"This is fixed in version 3.26.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-58370","publishedAt":"2025-09-05T23:15:30.260Z","cveId":"CVE-2025-58370","cweIds":["CWE-78"],"cvssScore":"8.1","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Roo Code"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Roo Code command parsing flaw allows arbitrary command execution via prompts","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00437,"epssCheckedAt":"2026-11-04T18:09:13.386Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-04T12:08:52.218Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.93,"researchCategory":null,"atlasIds":null,"fixes":[]}}