PT-2026-31679 · Foundation Agents+2 · Metagpt

Eric-C · Published 2026-04-09 · Updated 2026-04-09 · CVE-2026-5971

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FoundationAgents MetaGPT versions prior to 0.8.2

Description A flaw in the XML Handler component allows remote attackers to cause improper neutralization of directives in dynamically evaluated code. This issue occurs within the ActionNode.xml fill() function located in the metagpt/actions/action node.py file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of the ActionNode.xml fill() function.

Exploit

Code Injection

Eval Injection

Weakness Enumeration

CWE-94

CWE-95

Related Identifiers

CVE-2026-5971

GHSA-3GHP-8R47-4GJ4

Affected Products

Metagpt

References · 8

• 🔥 https://github.com/FoundationAgents/MetaGPT/issues/1928 · Exploit
• 🔥 https://vuldb.com/submit/791734 · Exploit
• https://osv.dev/vulnerability/GHSA-3ghp-8r47-4gj4 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-5971 · Security Note
• https://github.com/FoundationAgents/MetaGPT · Note
• https://github.com/FoundationAgents/MetaGPT/issues/1956 · Note
• https://vuldb.com/vuln/356525/cti · Note
• https://vuldb.com/vuln/356525 · Note