CVE-2026-5972 is an operating system command injection vulnerability discovered in FoundationAgents MetaGPT versions up to 0.8.1, specifically within the Terminal.run_command function located in metagpt/tools/libs/terminal.py. This flaw allows attackers to inject and execute arbitrary OS commands through the affected library component. The vulnerability carries a CVSS severity rating of 7.3 (HIGH) with a network attack vector requiring no privileges or user interaction, making it remotely exploitable with minimal complexity. Successful exploitation could result in partial compromise of confidentiality, integrity, and availability of affected systems. Public disclosure of this vulnerability has occurred and exploit code is available. However, current exploitation appears limited, with an EPSS score of 0.018 indicating below-average likelihood of active exploitation in the wild. The patch has been identified as commit d04ffc8dc67903e8b327f78ec121df5e190ffc7b, and immediate application is strongly recommended for all users running affected MetaGPT versions.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 0.8.1CPE matchmatch criteria | cpe:2.3:a:deepwisdom:metagpt:*:*:*:*:*:*:*:* |
CVSS version used by this source: 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.