CVE-2026-81835: Code Injection in RooCodeInc Roo-Code
Description
CVE-2026-81835 is a medium severity code injection vulnerability in RooCodeInc Roo-Code versions 3.51.0 and 3.51.1. It affects the fetch_instructions function in the malicious_mcp_server.py file within the MCP Integration Trust Model component. The vulnerability allows remote attackers to inject code. The product is no longer supported by the vendor, who has archived the repository and does not encourage use of the software.
CVSS v4.0
Score 5.1medium
Affected software
RooCodeInc
Roo-Code
cpe:2.3:a:roocodeinc:roo-code:*:*:*:*:*:*:*:*AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves code injection through manipulation of the fetch_instructions function in the malicious_mcp_server.py file of RooCodeInc Roo-Code up to versions 3.51.1. The vulnerability can be exploited remotely and was publicly disclosed. The vendor has stated that Roo-Code is no longer supported and the repository is archived, indicating no official fixes or patches will be provided.
Potential Impact
Successful exploitation allows remote attackers to inject and execute arbitrary code within the affected component. This could lead to unauthorized actions or compromise of the system running the vulnerable Roo-Code software. However, the impact is mitigated by the fact that the product is no longer maintained or supported by the vendor.
Mitigation Recommendations
No official fix or patch is available as the vendor no longer supports Roo-Code and has archived the project repository. Users are advised to discontinue use of Roo-Code and migrate to supported alternatives. Patch status is not confirmed; check vendor communications for any updates, though none are expected.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-08-27T14:49:24.298Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a916b3facd9273b49cabe9c
Added to database: 08/28/2026, 11:04:31 UTC
Last enriched: 09/10/2026, 03:08:03 UTC
Last updated: 10/13/2026, 18:48:24 UTC
Views: 57
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.