CVE-2025-53536: Roo Code allows Potential Remote Code Execution via .vscode/settings.json
Roo Code is an AI-powered autonomous coding agent. Prior to 3.22.6, if the victim had "Write" auto-approved, an attacker with the ability to submit prompts to the agent could write to VS Code settings files and trigger code execution. There were multiple ways to achieve that. One example is with the php.validate.executablePath setting which lets you set the path for the php executable for syntax validation. The attacker could have written the path to an arbitrary command there and then created a php file to trigger it. This vulnerability is fixed in 3.22.6.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-53536?
CVE-2025-53536 is considered a high severity vulnerability due to the potential for arbitrary code execution.
How do I fix CVE-2025-53536?
To fix CVE-2025-53536, upgrade Roo Code to version 3.22.6 or later, which addresses the vulnerability.
Who is affected by CVE-2025-53536?
CVE-2025-53536 affects users of Roo Code versions prior to 3.22.6 who have 'Write' auto-approved permissions.
What kind of attack is possible due to CVE-2025-53536?
CVE-2025-53536 allows an attacker to execute arbitrary code by exploiting the ability to write to VS Code settings files.
When was CVE-2025-53536 published?
CVE-2025-53536 was published in 2025, highlighting a significant security issue with earlier versions of Roo Code.