{"id":8820,"date":"2025-07-24T02:43:52","date_gmt":"2025-07-24T02:43:52","guid":{"rendered":"http:\/\/localhost\/?p=8820"},"modified":"2025-07-24T02:43:52","modified_gmt":"2025-07-24T02:43:52","slug":"roo-code-lacks-line-break-validation-in-its-command-execution-tool","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=8820","title":{"rendered":"Roo Code Lacks Line Break Validation in its Command Execution Tool"},"content":{"rendered":"
\n

CVE Details<\/h2>\n
\n
\n

Basic Information<\/h3>\n\n\n\n\n\n
Title<\/th>\nRoo Code Lacks Line Break Validation in its Command Execution Tool<\/td>\n<\/tr>\n
Type<\/th>\ncve<\/td>\n<\/tr>\n
Published<\/th>\n2025-07-23T20:36:01.878Z<\/td>\n<\/tr>\n
Modified<\/th>\n2025-07-23T20:48:31.557Z<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Product Information<\/h3>\n\n\n\n\n
Vendor<\/th>\nRooCodeInc<\/td>\n<\/tr>\n
Product<\/th>\nRoo-Code<\/td>\n<\/tr>\n
Version<\/th>\n< 3.23.19<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
\n

CVSS Information<\/h3>\n\n\n\n
Base Score<\/th>\n7.8 (HIGH)<\/td>\n<\/tr>\n
Attack Vector<\/th>\nCVSS:3.1\/AV:L\/AC:L\/PR:L\/UI:N\/S:U\/C:H\/I:H\/A:H<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

AI Analysis<\/h3>\n\n\n\n\n\n\n
AI Description<\/th>\nRooCode versions 3.23.18 and below lack validation of line breaks in command inputs, potentially allowing attackers to bypass security mechanisms and inject malicious commands. This vulnerability could lead to unauthorized code execution. It is fixed in version 3.23.19.<\/td>\n<\/tr>\n
AI Severity<\/th>\nHigh<\/td>\n<\/tr>\n
AI Vendor<\/th>\nRooCodeInc<\/td>\n<\/tr>\n
AI Product<\/th>\nRoo-Code<\/td>\n<\/tr>\n
AI Version<\/th>\n3.23.18 and below<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Affected Products<\/h4>\n