{"data":{"id":"ec08f166-ff4c-4970-86b8-acd32a29b202","title":"CVE-2025-58371: Roo Code is an AI-powered autonomous coding agent that lives in users' editors. In versions 3.26.6 and below, a Github…","summary":"CVE-2025-58371 affects Roo Code, an AI-powered autonomous coding agent, in versions 3.26.6 and below. A GitHub workflow used unsanitized pull request metadata in a privileged context, so an attacker can craft input that achieves Remote Code Execution on the Actions runner. Because the workflow runs with broad permissions and access to repository secrets, the attacker can run arbitrary commands, modify code, access secrets and create malicious releases or packages, fully compromising the repository and its associated services.","solution":"Fixed in version 3.26.7.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-58371","publishedAt":"2025-09-05T23:15:30.467Z","cveId":"CVE-2025-58371","cweIds":["CWE-78"],"cvssScore":"9.8","cvssSeverity":"critical","severity":"critical","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Roo Code"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Roo Code GitHub workflow code execution via unsanitized pull request metadata","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.0153,"epssCheckedAt":"2026-11-04T00:12:27.047Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-04T12:08:51.931Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0010"],"fixes":[]}}