PT-2025-28241 · Robocode+1 · Robocode+1

Maccarita · Published 2025-07-07 · Updated 2025-07-07 · CVE-2025-53536

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Roo Code versions prior to 3.22.6

Description: Roo Code is an AI-powered autonomous coding agent. If the victim had "Write" auto-approved, an attacker with the ability to submit prompts to the agent could write to VS Code settings files and trigger code execution. One example is with the php.validate.executablePath setting, which lets you set the path for the php executable for syntax validation. The attacker could have written the path to an arbitrary command there and then created a php file to trigger it.

Recommendations: For versions prior to 3.22.6, update to version 3.22.6 to resolve the issue. As a temporary workaround, consider disabling the "Write" auto-approved feature until the update is applied. Restrict access to the php.validate.executablePath setting to minimize the risk of exploitation. Avoid using the php.validate.executablePath setting in VS Code settings files until the issue is resolved.

Exploit

Fix

Files Accessible to External Parties

Weakness Enumeration

CWE-552

Related Identifiers

CVE-2025-53536

GHSA-3765-5VJR-QJGM

Affected Products

Robocode

Vscode

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/53xxx/CVE-2025-53536.json · Exploit
• https://github.com/RooCodeInc/Roo-Code/commit/1be6fce1a6864ae63e8160b0666db2c647f2dbba · Patch
• https://github.com/RooCodeInc/Roo-Code/security/advisories/GHSA-3765-5vjr-qjgm · Vendor Advisory
• https://github.com/RooCodeInc/Roo-Code/commit/3993406ebdc0553a32ef391a799a4fb124930a1c · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-53536 · Security Note
• https://osv.dev/vulnerability/CVE-2025-53536 · Vendor Advisory
• https://twitter.com/CVEnew/status/1942287941834825895 · Twitter Post