PT-2025-27260 · Robocode · Robocode

Maccarita · Published 2025-06-27 · Updated 2025-06-28 · CVE-2025-53098

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Roo Code versions prior to 3.20.3

Description: The issue concerns the execution of arbitrary commands through the MCP configuration file. An attacker with access to the system could craft a prompt to write a malicious command to the MCP configuration file, potentially leading to arbitrary command execution. This requires the attacker to have the ability to submit prompts, for the user to have MCP enabled, and for the user to have enabled auto-approved file writes. The issue is considered moderate in severity.

Recommendations: For versions prior to 3.20.3, update to version 3.20.3 to fix the issue by adding an additional layer of opt-in configuration for auto-approving writing to Roo's configuration files. As a temporary workaround, consider disabling the auto-approve file writes feature to minimize the risk of exploitation. Restrict access to the .roo/ folder and its contents to prevent unauthorized modifications.

Exploit

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2025-53098

GHSA-5X8H-M52G-5V54

Affected Products

Robocode

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/53xxx/CVE-2025-53098.json · Exploit
• https://github.com/RooCodeInc/Roo-Code/security/advisories/GHSA-5x8h-m52g-5v54 · Vendor Advisory
• https://github.com/RooCodeInc/Roo-Code/commit/7d0b22f9e659dc6c26aab0bacbea27874986e772 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-53098 · Security Note
• https://osv.dev/vulnerability/CVE-2025-53098 · Vendor Advisory
• https://twitter.com/CVEnew/status/1938716659545444360 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1938842923652571219 · Twitter Post
• https://t.me/cvetracker/27278 · Telegram Post
• https://t.me/cvenotify/126964 · Telegram Post