Technical impact
The vulnerability resides in the Bash.run function of FoundationAgents MetaGPT, allowing an attacker to inject arbitrary operating system commands. This injection can be leveraged to execute any command with the privileges of the running MetaGPT process, potentially compromising confidentiality, integrity, and availability of the host system.
Affected Systems
The affected product is FoundationAgents MetaGPT up to version 0.8.1. All installations of these versions that expose the Bash.run functionality are vulnerable.
Risk and Exploitability
The CVSS score of 6.9 indicates a moderate severity. Although an EPSS score is 2% and the vulnerability is not listed in CISA's KEV catalog, the ability to perform a remote OS command injection makes exploitation likely if the MetaGPT instance is reachable over a network or exposed to untrusted inputs. An attacker can execute arbitrary commands, leading to full compromise of the affected host.
Github GHSA