In breve
- CVE-2026-5973 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda metagpt, metagpt (deepwisdom).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.5%, superiore al 84.8% delle vulnerabilità.
- Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.
| Package | Affected versions | Patched versions |
|---|
| metagpt PyPI | ≤ 0.8.1
| No fix yet |
| metagpt | ≤ 0.8.1
| No fix yet |
Description
A vulnerability was found in FoundationAgents MetaGPT up to 0.8.1. Impacted is the function get_mime_type of the file metagpt/utils/common.py. The manipulation results in os command injection. The attack can be executed remotely. The exploit has been made public and could be used. The project was informed of the problem early through a pull request but has not reacted yet.
NVD description
A vulnerability was found in FoundationAgents MetaGPT up to 0.8.1. Impacted is the function get_mime_type of the file metagpt/utils/common.py. The manipulation results in os command injection. The attack can be executed remotely. The exploit has been made public and could be used. The project was informed of the problem early through a pull request but has not reacted yet.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free