FoundationAgents MetaGPT vulnerable to OS Command Injection in metagpt/tools/libs/terminal.py

CRITICAL 9.8CVE-2026-5974 · GHSA-fcc8-4q7h-wvwc · PYSEC-2026-2639 · Published 09/04/2026 · updated 26/10/2026

Package	Affected versions	Patched versions
metagpt PyPI	`≤ 0.8.1`	No fix yet
metagpt deepwisdom	`≤ 0.8.1`	No fix yet

Description

A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1. The affected element is the function Bash.run in the library metagpt/tools/libs/terminal.py. This manipulation causes os command injection. The attack is possible to be carried out remotely. The project was informed of the problem early through a pull request but has not reacted yet.

NVD description

References

nvd.nist.gov/vuln/detail/CVE-2026-5974 · ADVISORY
FoundationAgents/MetaGPT · WEB
FoundationAgents/MetaGPT#1940 · WEB
FoundationAgents/MetaGPT · PACKAGE
vuldb.com/submit/791758 · WEB
vuldb.com/vuln/356528 · WEB
vuldb.com/vuln/356528/cti · WEB
FoundationAgents/MetaGPT · Product
pypi.org/project/metagpt · PACKAGE
GitHub Advisory GHSA-fcc8-4q7h-wvwc · ADVISORY

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free