CVE-2026-81097: Improper Neutralization of Special Elements used in an OS Command

The executeruby tool is documented as a read-only Ruby sandbox and is enforced by a pattern denylist together with replacements for the process-spawning methods on Kernel. The pseudo-terminal library's spawn entry points are neither in the denylist nor replaced, so a normal tool call could reach...

Malicious code in paysafe-gbp-virtual-terminal-lib-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8437cc0ad1a14bf5694e8b5fbc17a0616033c1c473c6e71f46684172bc122ab3 The package paysafe-gbp-virtual-terminal-lib-fe was found to contain malicious code. Source: ossf-package-analysis...

GHSA-FCC8-4Q7H-WVWC FoundationAgents MetaGPT vulnerable to OS Command Injection in metagpt/tools/libs/terminal.py

A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1. The affected element is the function Bash.run in the library metagpt/tools/libs/terminal.py. This manipulation causes os command injection. The attack is possible to be carried out remotely. The project was informed of the...

MetaGPT 操作系统命令注入漏洞

MetaGPT is a multi-agent framework developed by MetaGPT Inc. Versions of MetaGPT 0.8.1 and earlier contained a vulnerability related to operating system command injection. This vulnerability stemmed from the Bash.run function in the metagpt/tools/libs/terminal.py library, which could allow attack...

The vulnerability of the _nc_wrap_entry() component in the terminal input/output control library allows a attacker to trigger a service denial.

The vulnerability of the ncwrapentry component in the terminal input/output control library is related to the operation of writing data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...