CVE-2026-5973
CVE-2026-5973 · FoundationAgents MetaGPT common.py get_mime_type os command injection
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
A vulnerability was found in FoundationAgents MetaGPT up to 0.8.1. Impacted is the function get_mime_type of the file metagpt/utils/common.py. The manipulation results in os command injection. The attack can be executed remotely. The exploit has been made public and could be used. The project was informed of the problem early through a pull request but has not reacted yet.
CVSS 6.9 · Media · EPSS 2,5%
- Publicación
- Actualización
Pila tecnológica: python
Productos y versiones afectados
metagpt
- Versiones
- 0.8.0: Afectada
- 0.8.1: Afectada
Sin corrección publicada
metagpt PyPI
- Versiones
- 0.1
- 0.3.0
- 0.4.0
- 0.5.0
- 0.5.1
- 0.5.2
- 0.6.0
- 0.6.1
- 0.6.10
- 0.6.11
- 0.6.12
- 0.6.13
- 0.6.2
- 0.6.3
- 0.6.4
- 0.6.5
- 0.6.6
- 0.6.7
- 0.6.8
- 0.6.9
- 0.7.0
- 0.7.1
- 0.7.2
- 0.7.3
- 0.7.4
- 0.7.6
- 0.7.7
- 0.8.0
- 0.8.1
- Intervalos de versiones afectados
- ECOSYSTEM: ≤ 0.8.1
Sin corrección publicada