CyberRota Analysis
AI-GeneratedA path traversal vulnerability exists in the ApplyPatchTool component of RooCodeInc Roo-Code versions up to 3.51.1, allowing remote attackers to exploit the flaw. This issue is particularly concerning for organizations still using this unsupported software, as it poses a risk of unauthorized file access. Users of affected products should prioritize remediation efforts, given the availability of published exploits.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw has been found in RooCodeInc Roo-Code up to 3.51.1. This issue affects the function path.resolve of the file src/core/tools/ApplyPatchTool.ts of the component ApplyPatchTool. This manipulation causes path traversal. It is possible to initiate the attack remotely. The exploit has been published and may be used. Multiple isses were reported to the vendor beforehand. They explain, that "they all apply to Roo Code, a project we no longer support - the repository was archived a while ago, and we don't encourage anyone to use it." This vulnerability only affects products that are no longer supported by the maintainer.