GitHub Advisoryadvisory · PyPI

GHSA-3ghp-8r47-4gj4 FoundationAgents MetaGPT vulnerable to eval injection

MEDIUM Published 2026-04-09 Modified 2026-04-10 Official page ↗
Aliases
CVE-2026-5971
Ecosystem
PyPI
Packages
metagpt
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weaknesses
CWE-94
Reviewed
2026-04-10

Affected packages

• PyPI metagpt: <= 0.8.1 (no fix yet)

Description

A flaw has been found in FoundationAgents MetaGPT up to 0.8.1. This vulnerability affects the function ActionNode.xml_fill of the file metagpt/actions/action_node.py of the component XML Handler. Executing a manipulation can lead to improper neutralization of directives in dynamically evaluated code. The attack may be launched remotely. The exploit has been published and may be used. The project was informed of the problem early through a pull request but has not reacted yet.

Related

Alias · CVE (1)

  • CVE-2026-5971 A flaw has been found in FoundationAgents MetaGPT up to 0.8.1. vulnerability

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References