{"data":{"id":"e5610136-e555-4cbe-ab79-5fde10895c81","title":"CVE-2025-57771: Roo Code is an AI-powered autonomous coding agent that lives in users' editors. In versions prior to 3.25.5, Roo-Code…","summary":"CVE-2025-57771 affects Roo Code, an AI-powered autonomous coding agent, in versions prior to 3.25.5. The command parsing logic does not properly handle process substitution and single ampersand characters for auto-execute commands, so an attacker who can submit crafted prompts may inject arbitrary commands to run alongside an intended command such as ls. Exploitation requires prompt submission access and that the user has enabled auto-approved command execution, which is disabled by default; the source states this could allow arbitrary code execution.","solution":"Fixed in version 3.25.5.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-57771","publishedAt":"2025-08-22T17:15:36.183Z","cveId":"CVE-2025-57771","cweIds":["CWE-78"],"cvssScore":"8.1","cvssSeverity":"high","severity":"high","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Roo Code"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Roo Code command injection in auto-approved command parsing","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00747,"epssCheckedAt":"2026-11-04T18:09:14.608Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-04T18:09:17.749Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.93,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[]}}