What is CVE-2025-58370?

CVE-2025-58370 is a high-severity vulnerability in Roocode Roo Code, classified under OS Command Injection. CVSS score: 8.1/10. Published 2025-09-05.

How severe is CVE-2025-58370?

High severity. CVSS v3 base score is 8.1 out of 10.

Is CVE-2025-58370 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

RCE in Roocode Roo Code

CVE-2025-58370

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Versions below 3.26.0 contain a vulnerability in the command parsing logic where the Bash parameter expansion and indirect reference were not handled correctly. If the agent was configured to auto-approve execution of certain commands, an attacker able to influence prompts could abuse this weakness to execute additional arbitrary commands alongside the intended one. This is fixed in version 3.26.0.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.004 (33.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Roocode Roo_code
Roocodeinc Roo-code — versions < 3.26.0

Weakness classification (CWE)

CWE-78 — OS Command Injection

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

security-advisories@github.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2025-58370?: CVE-2025-58370 is a high-severity vulnerability in Roocode Roo Code, classified under OS Command Injection. CVSS score: 8.1/10. Published 2025-09-05.
How severe is CVE-2025-58370?: High severity. CVSS v3 base score is 8.1 out of 10.
Is CVE-2025-58370 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.