PT-2026-31679 · Foundation Agents · Metagpt

Eric-C · CVE-2026-5971 · Published 2026-04-09 · Updated 2026-07-13

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FoundationAgents MetaGPT versions prior to 0.8.2

Description A flaw in the XML Handler component allows remote attackers to cause improper neutralization of directives in dynamically evaluated code. This issue occurs within the ActionNode.xml fill() function located in the metagpt/actions/action node.py file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of the ActionNode.xml fill() function.

Exploit

Eval Injection

Code Injection

Weakness Enumeration

CWE-95

CWE-94

Related Identifiers

CVE-2026-5971

GHSA-3GHP-8R47-4GJ4

PYSEC-2026-2638

Affected Products

Metagpt

References · 13

• 🔥 https://github.com/FoundationAgents/MetaGPT/issues/1928 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/5xxx/CVE-2026-5971.json · Exploit
• 🔥 https://vuldb.com/submit/791734 · Exploit
• https://osv.dev/vulnerability/CVE-2026-5971 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2026-2638 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-3ghp-8r47-4gj4 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-5971 · Security Note
• https://github.com/FoundationAgents/MetaGPT · Note
• https://github.com/FoundationAgents/MetaGPT/issues/1956 · Note
• https://vuldb.com/vuln/356525/cti · Note
• https://vuldb.com/vuln/356525 · Note
• https://github.com/advisories/GHSA-3ghp-8r47-4gj4 · Note
• https://pypi.org/project/metagpt · Note