GHSA-g977-h85w-h2xjMediumCVSS 7.3

MetaGPT has an Injection issue

Published
April 9, 2026
Last Modified
May 6, 2026

🔗 CVE IDs covered (1)

CVE-2026-5970 →

📋 Description

A vulnerability was detected in FoundationAgents MetaGPT up to 0.8.1. This affects the function check_solution of the component HumanEvalBenchmark/MBPPBenchmark. Performing a manipulation results in code injection. The attack may be initiated remotely. The exploit is now public and may be used. The project was informed of the problem early through a pull request but has not reacted yet.

🎯 Affected products1

  • pip/metagpt:<= 0.8.1

🔗 References (8)