Log in Start free

Vulnerability · Published Apr 9, 2026 · Assigned by VulDB

CVE-2026-5971FoundationAgents MetaGPT XML action_node.py ActionNode.xml_fill eval injection

High 7.3

In plain English

A high-severity code injection in MetaGPT from FoundationAgents. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 35% of all known vulnerabilities).

Severity (CVSS 3.1)7.3High
Exploit odds (30 days)0.4%top 65.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A flaw has been found in FoundationAgents MetaGPT up to 0.8.1. This vulnerability affects the function ActionNode.xml_fill of the file metagpt/actions/action_node.py of the component XML Handler. Executing a manipulation can lead to improper neutralization of directives in dynamically evaluated code. The attack may be launched remotely. The exploit has been published and may be used. The project was informed of the problem early through a pull request but has not reacted yet.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
PyPImetagptno fix listedGHSA-3ghp-8r47-4gj4
PyPImetagptno fix listedPYSEC-2026-2638

Affected products (as reported)

VendorProductVersions
FoundationAgents MetaGPT 0.8.00.8.1

Weakness: CWE-95, CWE-94 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

References