Vulnerability · Published Sep 5, 2025 · Assigned by GitHub_M
CVE-2025-58372Roo Code: Potential Remote Code Execution via .code-workspace
High 8.1
In plain English
A high-severity incorrect permission assignment in Roo-Code from RooCodeInc. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 46% of all known vulnerabilities).
Official description
Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Versions 3.25.23 and below contain a vulnerability where certain VS Code workspace configuration files (.code-workspace) are not protected in the same way as the .vscode folder. If the agent was configured to auto-approve file writes, an attacker able to influence prompts (for example via prompt injection) could cause malicious workspace settings or tasks to be written. These tasks could then be executed automatically when the workspace is reopened, resulting in arbitrary code execution. This issue is fixed in version 3.26.0.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| RooCodeInc | Roo-Code | < 3.26.0 |
Weakness: CWE-732, CWE-94 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H