Security Advisory

CVE-2026-5974

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-04-09 19:30:15
Last updated 2026-04-09 20:17:26
Assigner VulDB
CVSS score 6.9
State PUBLISHED

Description

A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1. The affected element is the function Bash.run in the library metagpt/tools/libs/terminal.py. This manipulation causes os command injection. The attack is possible to be carried out remotely. The project was informed of the problem early through a pull request but has not reacted yet.