6 matches found
CVE-2026-79408
An OS command injection vulnerability in MetaGPT 0.8.1 allows an attacker to execute arbitrary commands via the path argument of RepoParser.rebuildclassviews in metagpt/repoparser.py...
CVE-2026-79408
An OS command injection vulnerability in MetaGPT 0.8.1 allows an attacker to execute arbitrary commands via the path argument of RepoParser.rebuildclassviews in metagpt/repoparser.py...
PT-2026-83998
Name of the Vulnerable Software and Affected Versions MetaGPT version 0.8.1 Description An OS command injection flaw exists where the rebuild class views function in metagpt/repo parser.py interpolates the path argument into a shell command using shell=True without using an argument list. This...
CVE-2026-79408
MetaGPT version 0.8.1 is vulnerable to an OS command injection flaw within the metagpt/repo_parser.py file. The root cause is that the RepoParser.rebuild_class_views() function interpolates the path argument into a shell command using shell=True without utilizing an argument list. This allows an ...
