PT-2026-31707 · Foundation Agents · Metagpt

Eric-C · Published 2026-04-09 · Updated 2026-04-19 · CVE-2026-5972

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FoundationAgents MetaGPT versions up to 0.8.1

Description A flaw exists in the Terminal.run command function within the metagpt/tools/libs/terminal.py library. This allows for os command injection, potentially enabling remote exploitation. The exploit has been publicly disclosed.

Recommendations Apply the patch d04ffc8dc67903e8b327f78ec121df5e190ffc7b.

Exploit

Fix

Command Injection

OS Command Injection

Weakness Enumeration

CWE-77

CWE-78

Related Identifiers

CVE-2026-5972

GHSA-WP29-QMVJ-FRVP

Affected Products

Metagpt

References · 10

• 🔥 https://github.com/FoundationAgents/MetaGPT/issues/1929 · Exploit
• 🔥 https://vuldb.com/submit/791745 · Exploit
• https://github.com/paipeline/MetaGPT/commit/d04ffc8dc67903e8b327f78ec121df5e190ffc7b · Patch
• https://osv.dev/vulnerability/GHSA-wp29-qmvj-frvp · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-5972 · Security Note
• https://github.com/FoundationAgents/MetaGPT · Note
• https://twitter.com/giuseppe_1337/status/2045665068415598845 · Twitter Post
• https://vuldb.com/vuln/356526 · Note
• https://vuldb.com/vuln/356526/cti · Note
• https://twitter.com/CVEnew/status/2042340072251400622 · Twitter Post