En resumen
- CVE-2026-5973 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a metagpt, metagpt (deepwisdom).
- Probabilidad de explotación en los próximos 30 días (EPSS): 2.5%, mayor que el 84.8% de las vulnerabilidades.
- Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.
| Package | Affected versions | Patched versions |
|---|
| metagpt PyPI | ≤ 0.8.1
| No fix yet |
| metagpt | ≤ 0.8.1
| No fix yet |
Description
A vulnerability was found in FoundationAgents MetaGPT up to 0.8.1. Impacted is the function get_mime_type of the file metagpt/utils/common.py. The manipulation results in os command injection. The attack can be executed remotely. The exploit has been made public and could be used. The project was informed of the problem early through a pull request but has not reacted yet.
NVD description
A vulnerability was found in FoundationAgents MetaGPT up to 0.8.1. Impacted is the function get_mime_type of the file metagpt/utils/common.py. The manipulation results in os command injection. The attack can be executed remotely. The exploit has been made public and could be used. The project was informed of the problem early through a pull request but has not reacted yet.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free