PT-2026-31707 · Foundation Agents · Metagpt

Eric-C · CVE-2026-5972 · Published 2026-04-09 · Updated 2026-07-13

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FoundationAgents MetaGPT versions up to 0.8.1

Description A flaw exists in the Terminal.run command function within the metagpt/tools/libs/terminal.py library. This allows for os command injection, potentially enabling remote exploitation. The exploit has been publicly disclosed.

Recommendations Apply the patch d04ffc8dc67903e8b327f78ec121df5e190ffc7b.

Exploit

Fix

OS Command Injection

Command Injection

Weakness Enumeration

CWE-78

CWE-77

Related Identifiers

CVE-2026-5972

GHSA-WP29-QMVJ-FRVP

PYSEC-2026-2644

Affected Products

Metagpt

References · 15

• 🔥 https://github.com/FoundationAgents/MetaGPT/issues/1929 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/5xxx/CVE-2026-5972.json · Exploit
• 🔥 https://vuldb.com/submit/791745 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5972 · Security Note
• https://osv.dev/vulnerability/GHSA-wp29-qmvj-frvp · Vendor Advisory
• https://github.com/paipeline/MetaGPT/commit/d04ffc8dc67903e8b327f78ec121df5e190ffc7b · Patch
• https://osv.dev/vulnerability/PYSEC-2026-2644 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-5972 · Vendor Advisory
• https://github.com/FoundationAgents/MetaGPT · Note
• https://github.com/advisories/GHSA-wp29-qmvj-frvp · Note
• https://twitter.com/giuseppe_1337/status/2045665068415598845 · Twitter Post
• https://vuldb.com/vuln/356526/cti · Note
• https://vuldb.com/vuln/356526 · Note
• https://pypi.org/project/metagpt · Note
• https://twitter.com/CVEnew/status/2042340072251400622 · Twitter Post