PT-2025-30619

CVE-2025-54377

Published

2025-07-23

Updated

2025-07-24

Description by

CVSS 3.1

7.8

High

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Roo Code versions 3.23.18 and below

Description Roo Code, an AI-powered autonomous coding agent, does not validate line breaks ( ) in its command input. This bypasses the allow-list mechanism due to a lack of parsing or validation logic, potentially enabling command injection. Only the first line or token may be considered during command evaluation, allowing attackers to smuggle additional commands in subsequent lines.

Recommendations Update to Roo Code version 3.23.19 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Maccarita

Yellowday60-Git

Vendors

Affected products

Weakness enumeration

CWE-77: Improper Neutralization of Special Elements used in a Command (\'Command Injection\')