Arbitrary Command Execution Vulnerability in Roo Code by Roo Code Inc.

CVE-2025-53098

What is CVE-2025-53098?

Roo Code, developed by Roo Code Inc., contains a vulnerability that involves its MCP configuration stored in the .roo/mcp.json file. Before version 3.20.3, this configuration format permitted the execution of arbitrary commands. An attacker who could submit prompts to the Roo Code agent might craft a malicious command that, if the user had enabled auto-approval for file writes, could lead to unauthorized command execution. The vulnerability's impact hinges on several conditions, including the user's configuration settings, which by default are not optimized for security. The recent update in version 3.20.3 incorporates additional opt-in measures to help secure Roo's configuration against such potential exploits.

References