PT-2025-36340 · Robocode+1 · Robocode+1

Thelicato · Published 2025-09-05 · Updated 2025-09-06 · CVE-2025-58372

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Roo Code versions 3.25.23 and below

Description Roo Code, an AI-powered autonomous coding agent, is susceptible to a flaw where VS Code workspace configuration files (.code-workspace) lack the same protection as files within the .vscode folder. If the agent is configured for auto-approval of file writes, an attacker leveraging prompt injection could introduce malicious workspace settings or tasks. Upon reopening the workspace, these tasks could execute arbitrary code.

Recommendations Update to version 3.26.0 or later.

Exploit

Fix

RCE

Code Injection

Incorrect Permission

Weakness Enumeration

CWE-94

CWE-732

Related Identifiers

CVE-2025-58372

GHSA-4PQH-4GGM-JFMM

Affected Products

Robocode

Vscode

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/58xxx/CVE-2025-58372.json · Exploit
• https://github.com/RooCodeInc/Roo-Code/commit/296edfc829a7c6efc8b5dbe09aa766a9aed79598 · Patch
• https://github.com/RooCodeInc/Roo-Code/security/advisories/GHSA-4pqh-4ggm-jfmm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-58372 · Security Note
• https://osv.dev/vulnerability/CVE-2025-58372 · Vendor Advisory
• https://github.com/RooCodeInc/Roo-Code/releases/tag/v3.26.0 · Note
• https://t.me/CVEtracker/31833 · Telegram Post
• https://t.me/canyoupwnme/6914 · Telegram Post
• https://t.me/cveNotify/134523 · Telegram Post
• https://twitter.com/CVEnew/status/1964195409875865782 · Twitter Post