Arbitrary Code Execution Vulnerability in Roo Code AI Coding Agent

CVE-2025-58374

What is CVE-2025-58374?

The Roo Code AI-powered coding agent featured a significant vulnerability that allowed for arbitrary code execution through the execution of npm install commands. In versions 3.25.23 and earlier, the agent had a default list of approved commands, which, when auto-approve was enabled, bypassed user confirmation. This lack of manual oversight meant that if a user opened a repository containing a malicious package.json with a harmful postinstall script, that script would be executed automatically. The issue has been addressed in version 3.26.0, emphasizing the importance of updating to ensure safety against such potential exploits.

References