CVE-2025-65946: Roo Code is Vulnerable to Potential Remote Code Execution via zsh Command Validation Bug
Published Nov 21, 2025
·Updated
Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Prior to version 3.26.7, Due to an error in validation it was possible for Roo to automatically execute commands that did not match the allow list prefixes. This issue has been patched in version 3.26.7.
Affected Software
2 affected components
Roo Code Roo Code<3.26.7
RooCode Roo Code<3.26.7
Remediation
Event History
Nov 21, 2025
CVE Published
via MITRE·10:11 PM
Data Sourced
via MITRE·10:11 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-65946?
CVE-2025-65946 is classified as a moderate severity vulnerability due to erroneous command execution.
2
How do I fix CVE-2025-65946?
To fix CVE-2025-65946, update your Roo Code installation to version 3.26.7 or later.
3
What types of commands are affected by CVE-2025-65946?
CVE-2025-65946 allows the execution of commands that do not conform to the designated allow list prefixes.
4
What versions of Roo Code are impacted by CVE-2025-65946?
Roo Code versions prior to 3.26.7 are affected by CVE-2025-65946.
5
Is user intervention required for CVE-2025-65946 to be exploited?
Yes, user intervention is required as the vulnerability relies on the automatic execution of commands.