CVE-2025-57771

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. In versions prior to 3.25.5, Roo-Code fails to properly handle process substitution and single ampersand characters in the command parsing logic for auto-execute commands. If a user has enabled auto-approved execution for a command such as ls, an attacker who can submit crafted prompts to the agent may inject arbitrary commands to be executed alongside the intended command. Exploitation requires attacker access to submit prompts and for the user to have enabled auto-approved command execution, which is disabled by default. This vulnerability could allow an attacker to execute arbitrary code. The issue is fixed in version 3.25.5.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published: Aug 22, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-577729.8DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.12, there is a H2 JDBC RCE bypass in Dat CVE-2025-577739.8DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.12, because DB2 parameters are not filte CVE-2025-577747.8There is an out of bounds write vulnerability due to improper bounds checking resulting in invalid data when parsing a DSB file with Digilen CVE-2025-577757.8There is a heap-based Buffer Overflow vulnerability due to improper bounds checking when parsing a DSB file with Digilent DASYLab. This vul CVE-2025-577767.8There is an out of bounds write vulnerability due to improper bounds checking resulting in an invalid address when parsing a DSB file with D CVE-2025-577777.8There is an out of bounds write vulnerability due to improper bounds checking in displ2.dll when parsing a DSB file with Digilent DASYLab. CVE-2025-577787.8There is an out of bounds write vulnerability due to improper bounds checking resulting in an invalid source address when parsing a DSB file CVE-2025-57789.8A vulnerability, which was classified as critical, was found in 1000 Projects ABC Courier Management System 1.0. Affected is an unknown func CVE-2025-577808.8A vulnerability exists in F5OS-A and F5OS-C system that may allow an authenticated attacker with local access to escalate their privileges. CVE-2025-577818.4The installers of DENSO TEN drive recorder viewer contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Li CVE-2025-577835.3Improper header parsing may lead to request smuggling has been identified in Hiawatha webserver version 11.7 which allows an unauthenticated CVE-2025-577843.3Tomahawk auth timing attack due to usage of `strcmp` has been identified in Hiawatha webserver version 11.7 which allows a local attacker to