CVE-2025-58373: Roo Code .rooignore bypass via symlinks exposes excluded files

Summary

Roo Code versions 3.25.23 and below contain a flaw where .rooignore exclusions can be bypassed using symlinks. An attacker with write access to the workspace can trick the extension into reading files meant to be excluded, such as .env or configuration files, exposing secrets and other excluded project data.

Mitigation

Fixed in version 3.26.0.

Topics

• AI agents

Related items

• MediumCVE-2026-121936: easyVoice server-side request forgery through openaiBaseUrl in /api/v1/ttsSimilar attack · NVD/CVE Database
• MediumCVE-2026-118628: MLflow get-artifacts server-side request forgery information disclosureSimilar attack · NVD/CVE Database
• HighCVE-2026-118625: MLflow Tracking Server privilege escalation via get_endpointsSimilar attack · NVD/CVE Database
• InfoWhen trust becomes the payload: Inside the threats, etc quarterly reportSimilar attack · Elastic Security Labs
• MediumCritical Langflow flaws enable authentication bypass and RCESimilar attack · CSO Online