CVE-2026-81835: Code Injection in RooCodeInc Roo-Code
Description
CVE-2026-81835 is a medium severity code injection vulnerability in RooCodeInc Roo-Code versions 3.51.0 and 3.51.1. It affects the fetch_instructions function in the malicious_mcp_server.py file of the MCP Integration Trust Model component. The vulnerability allows remote attackers to inject code. The product is no longer supported by the vendor, and no patches are available.
CVSS v4.0
Score 5.1medium
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves code injection in the fetch_instructions function of the malicious_mcp_server.py file within the MCP Integration Trust Model component of RooCodeInc Roo-Code. It affects versions 3.51.0 and 3.51.1 and can be exploited remotely. The vendor has archived the project and does not support it anymore, indicating no official fixes or patches will be provided. The CVSS 3.1 base score is 5.1 (medium severity), reflecting network attack vector, low complexity, and limited privileges required.
Potential Impact
Successful exploitation could allow remote attackers to inject and execute arbitrary code within the affected component. This could lead to unauthorized actions depending on the privileges of the affected process. However, the impact is somewhat mitigated by the fact that the product is no longer supported and presumably not recommended for use.
Mitigation Recommendations
No official fix or patch is available as the vendor has archived the project and does not support it. Users are advised to discontinue use of RooCodeInc Roo-Code and migrate to supported alternatives. Patch status is not yet confirmed — check the vendor advisory or project repository for any updates or community patches.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-q2jq-8pm2-fj8h
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-81835"]
- Database Specific Severity
- LOW
- Cvss Version
- 3.1
Threat ID: 6a91a7dcacd9273b490658ca
Added to database: 08/28/2026, 15:23:08 UTC
Last enriched: 09/10/2026, 00:08:15 UTC
Last updated: 10/13/2026, 18:48:24 UTC
Views: 58
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.