Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g977-h85w-h2xj

Опубликовано: 09 апр. 2026
Источник: github
Github: Прошло ревью
CVSS4: 5.5
CVSS3: 7.3

Описание

MetaGPT has an Injection issue

A vulnerability was detected in FoundationAgents MetaGPT up to 0.8.1. This affects the function check_solution of the component HumanEvalBenchmark/MBPPBenchmark. Performing a manipulation results in code injection. The attack may be initiated remotely. The exploit is now public and may be used. The project was informed of the problem early through a pull request but has not reacted yet.

Пакеты

Наименование

metagpt

pip
Затронутые версииВерсия исправления

<= 0.8.1

Отсутствует

EPSS

Процентиль: 32%
0.00387
Низкий

5.5 Medium

CVSS4

7.3 High

CVSS3

Дефекты

CWE-74

Связанные уязвимости

CVSS3: 7.3
nvd
5 месяцев назад

A vulnerability was detected in FoundationAgents MetaGPT up to 0.8.1. This affects the function check_solution of the component HumanEvalBenchmark/MBPPBenchmark. Performing a manipulation results in code injection. The attack may be initiated remotely. The exploit is now public and may be used. The project was informed of the problem early through a pull request but has not reacted yet.

EPSS

Процентиль: 32%
0.00387
Низкий

5.5 Medium

CVSS4

7.3 High

CVSS3

Дефекты

CWE-74