MetaGPT tiene un problema de Inyección

Successful exploitation of CVE-2026-5970 allows an attacker to execute arbitrary code on the system running FoundationAgents MetaGPT. This could lead to complete system compromise, data exfiltration, or denial of service. Given the remote nature of the attack and the availability of a public exploit, the potential for widespread exploitation is significant. The impact is amplified by the fact that MetaGPT is likely used in environments where sensitive data or critical processes are managed, potentially leading to cascading failures and significant reputational damage.

Organizations and individuals utilizing FoundationAgents MetaGPT versions 0.8.0 through 0.8.1, particularly those deploying it in environments handling sensitive data or critical infrastructure, are at immediate risk. Those relying on MetaGPT for automated code evaluation or testing are especially vulnerable.

• python / server:

import os
import subprocess
# Check for the vulnerable function
with open('/path/to/your/foundationagents/HumanEvalBenchmark/MBPPBenchmark.py', 'r') as f:
    if 'check_solution' in f.read():
        print('Vulnerable function detected!')

• python / supply-chain:

import subprocess
result = subprocess.run(['pip', 'show', 'foundationagents'], capture_output=True, text=True)
if 'Version: 0.8.0' in result.stdout or 'Version: 0.8.1' in result.stdout:
    print('FoundationAgents version is vulnerable!')

1. 2026-04-09Disclosure

   disclosure

2. 2026-04-09PoC

   poc

1. Reservado2026-04-09
2. Publicada2026-04-09
3. EPSS actualizado2026-04-17

The primary mitigation for CVE-2026-5970 is to upgrade to a patched version of FoundationAgents MetaGPT. As of this writing, no patched version has been released. Until a patch is available, consider implementing input validation on the check_solution function to sanitize user-provided data. While not a complete solution, this can reduce the attack surface. Monitor system logs for suspicious activity related to the HumanEvalBenchmark/MBPPBenchmark component. Implement network segmentation to limit the potential blast radius of a successful attack.