Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1. The affected element is the function Bash.run in the library metagpt/tools/libs/terminal.py. This manipulation causes os command injection. The attack is possible to be carried out remotely. The project was informed of the problem early through a pull request but has not reacted yet.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🚨 HIGH Severity CVE-2026-5974 | CVSS 7.3 OS Command Injection in FoundationAgents MetaGPT ≤0.8.1 Affected: Bash[.]run function in metagpt/tools/libs/terminal[.]py Remotely exploitable, no auth required Vendor unresponsive to disclosure #CVE #Vulnerability #PatchNow https://t.co/O22agWGCkW
Post summary
High severity OS command injection in MetaGPT 0.8.1 allows remote unauthenticated exploitation; vendor unresponsive.
CVE-2026-5974 A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1. The affected element is the function http://Bash.run in the library metagpt/tools/libs/terminal.py. Thi… https://www.cve.org/CVERecord?id=CVE-2026-5974
Post summary
The text announces CVE-2026-5974, a vulnerability in FoundationAgents MetaGPT 0.8.1 affecting the Bash.run function in terminal.py.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | deepwisdom | metagpt | - | - | - |