What’s Vulnerable › Vulnerabilities

CVE-2025-53536: Roo Code allows Potential Remote Code Execution via .vscode/settings.json

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-07-07 · updated 2026-06-17
• Weakness: CWE-552

Description

Roo Code is an AI-powered autonomous coding agent. Prior to 3.22.6, if the victim had "Write" auto-approved, an attacker with the ability to submit prompts to the agent could write to VS Code settings files and trigger code execution. There were multiple ways to achieve that. One example is with the php.validate.executablePath setting which lets you set the path for the php executable for syntax validation. The attacker could have written the path to an arbitrary command there and then created a php file to trigger it. This vulnerability is fixed in 3.22.6.

Affected products

• RooCodeInc Roo-Code: before 3.22.6 — fixed in 3.22.6

How to fix

Upgrade to a fixed version: RooCodeInc Roo-Code 3.22.6. Check the vendor advisory for mitigations.

References

• https://github.com/RooCodeInc/Roo-Code/commit/1be6fce1a6864ae63e8160b0666db2c647f2dbba
• https://github.com/RooCodeInc/Roo-Code/commit/3993406ebdc0553a32ef391a799a4fb124930a1c
• https://github.com/RooCodeInc/Roo-Code/security/advisories/GHSA-3765-5vjr-qjgm

Get alerted when CVE-2025-53536 or the next vulnerability affects your stack