Code Execution Vulnerability in Roo Code AI Agent

CVE-2025-53536

What is CVE-2025-53536?

The Roo Code AI-powered autonomous coding agent prior to version 3.22.6 contains a vulnerability that allows attackers to execute arbitrary code. This is possible when a victim has the 'Write' auto-approval feature enabled, enabling an attacker who submits prompt commands to modify VS Code settings files. For instance, an attacker could alter the php.validate.executablePath setting, replacing it with a path to an arbitrary command. Consequently, the attacker could create a malicious PHP file that triggers this code execution. The vulnerability has been mitigated in the most recent version.

References