Tchen200311

A vulnerability was detected in RooCodeInc Roo-Code up to 3.51.1. This vulnerability affects unknown code of the file src/integrations/claude-code/oauth.ts of the component OAuth Callback. The manipulation results in cleartext transmission of sensitive information. The attack may be performed from remote. A high complexity level is associated with this attack. It is stated that the exploitability is difficult. The exploit is now public and may be used. Multiple isses were reported to the vendor beforehand. They explain, that "they all apply to Roo Code, a project we no longer support - the repository was archived a while ago, and we don't encourage anyone to use it." This vulnerability only affects products that are no longer supported by the maintainer.

**Name of the Vulnerable Software and Affected Versions** RooCodeInc Roo-Code versions prior to 3.51.2 **Description** A weakness in the README File Handler component allows for remote code injection. This issue occurs within the `ExecaTerminalProcess()` function, where a manipulation can be executed to run arbitrary code remotely. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** RooCodeInc Roo-Code versions prior to 3.51.2 **Description** A flaw in the CodeIndexManager component allows for remote code injection. The issue resides within the `optimizeQuery()` function located in the `src/utils/helpers.ts` file. This flaw enables an attacker to execute arbitrary code remotely through manipulation of the affected function. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider disabling the `optimizeQuery()` function to minimize the risk of exploitation.

A security vulnerability has been detected in RooCodeInc Roo-Code up to 3.51.1. This affects the function fetch instructions of the file malicious mcp server.py of the component MCP Integration Trust Model. The manipulation leads to code injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. Multiple isses were reported to the vendor beforehand. They explain, that "they all apply to Roo Code, a project we no longer support - the repository was archived a while ago, and we don't encourage anyone to use it." This vulnerability only affects products that are no longer supported by the maintainer.

**Name of the Vulnerable Software and Affected Versions** RooCodeInc Roo-Code versions prior to 3.51.2 **Description** A path traversal flaw exists in the ApplyPatchTool component within the file src/core/tools/ApplyPatchTool.ts. The issue resides in the `path.resolve()` function, which allows a remote attacker to perform path traversal. Path traversal is a technique used to access files and directories that are stored outside the web root folder by manipulating variables that reference files with input that is not properly neutralized. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** FoundationAgents MetaGPT versions prior to 0.8.3 **Description** A flaw allows for code injection when an attacker has local access to the system. This issue occurs within an unspecified function, enabling the execution of arbitrary code. **Recommendations** Update FoundationAgents MetaGPT to version 0.8.3 or later.

**Name of the Vulnerable Software and Affected Versions** FoundationAgents MetaGPT versions prior to 0.8.3 **Description** A code injection issue exists in the `DataInterpreter()` function within the `metagpt/roles/di/data interpreter.py` file. This flaw allows a local attacker to execute arbitrary code through manipulation of the function. **Recommendations** As a temporary workaround, restrict access to the `DataInterpreter()` function in the `metagpt/roles/di/data interpreter.py` file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** FoundationAgents MetaGPT versions prior to 0.8.3 **Description** A path traversal issue exists in the `read()` function within the `metagpt/tools/libs/editor.py` file. This flaw allows a local attacker to access files and directories outside the intended folder by manipulating the input passed to the function. **Recommendations** As a temporary workaround, restrict access to the `read()` function in the `metagpt/tools/libs/editor.py` file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Aider-AI Aider version 0.86.3 **Description** A remote code execution issue exists within the Pre-commit Hook Handler component in the file `aider/args.py`. Manipulation of the `git-commit-verify` argument leads to a failure of the protection mechanism, allowing the attack to be launched remotely. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Aider-AI Aider version 0.86.3 **Description** A server-side request forgery (SSRF) issue exists in the AWS EC2 Metadata Endpoint component. This occurs within the `requests.get()` function located in the `api docs.py` file, allowing a remote attacker to manipulate requests sent by the server. **Recommendations** Install the available patch for version 0.86.3. As a temporary mitigation, restrict access to the `requests.get()` function within the `api docs.py` file.

**Name of the Vulnerable Software and Affected Versions** Aider-AI Aider version 0.86.3 **Description** A weakness in the Code Generation Workflow component allows for remote SQL injection, which occurs when an attacker executes a specific manipulation. SQL injection is a type of attack where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to or manipulation of the database. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Aider-AI Aider version 0.86.3 **Description** A security flaw in the Architect Mode component allows for remote code injection. The issue resides within the `editor coder.run()` function located in the `auth.py` file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of the `editor coder.run()` function within the Architect Mode component.