FoundationAgents MetaGPT vulnerable to OS Command Injection in metagpt/tools/libs/terminal.py

A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1. The affected element is the function Bash.run in the library metagpt/tools/libs/terminal.py. This manipulation causes os command injection. The attack is possible to be carried out remotely. The project was informed of the...

Arbitrary Command Injection

Overview metagpt is a The Multi-Agent Framework Affected versions of this package are vulnerable to Arbitrary Command Injection via the Bash.run method in metagpt/tools/libs/terminal.py. An attacker can execute arbitrary operating system commands by supplying crafted input remotely. Remediation A...

CVE-2026-5974

FoundationAgents MetaGPT

EUVD-2025-19102

Malicious code in bioql PyPI...

PT-2024-29383 · Icecoder · Icecoder

Name of the Vulnerable Software and Affected Versions: ICEcoder version 8.1 Description: The issue is related to Cross Site Scripting XSS via the lib/terminal-xhr.php file. This allows for potential malicious script execution. No information is provided about the estimated number of affected...

The vulnerability of the vc_do_resize function in the Linux operating system’s kernel allows a hacker to disclose sensitive information or cause service failures.

The vulnerability of the vcdoresize function in the Linux kernel’s drivers/tty/vt/vt.c file relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause service failures...

CVE-2019-17051

Evernote before 7.13 GA on macOS allows code execution because the com.apple.quarantine attribute is not used for attachment files, as demonstrated by a one-click attack involving a drag-and-drop operation on a crafted Terminal file...

CVE-2019-17051

Evernote before 7.13 GA on macOS allows code execution because the com.apple.quarantine attribute is not used for attachment files, as demonstrated by a one-click attack involving a drag-and-drop operation on a crafted Terminal file...

Remote code execution

Evernote before 7.13 GA on macOS allows code execution because the com.apple.quarantine attribute is not used for attachment files, as demonstrated by a one-click attack involving a drag-and-drop operation on a crafted Terminal file...