← Database

CVE-2026-5974

HIGH CVSS: 7.3 Published: 2026-04-09 Modified: 2026-06-17

Description

A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1. The affected element is the function Bash.run in the library metagpt/tools/libs/terminal.py. This manipulation causes os command injection. The attack is possible to be carried out remotely. The project was informed of the problem early through a pull request but has not reacted yet.

Affected Platforms

Deepwisdom Metagpt

Weakness Type

CWE-77, CWE-78

References