CVE-2026-5970

FoundationAgents MetaGPT HumanEvalBenchmark/MBPPBenchmark check_solution code injection

CVSS 6.9 MEDIUMEPSS 0.4%CWE-74 CWE-94

A vulnerability was detected in FoundationAgents MetaGPT up to 0.8.1. This affects the function check_solution of the component HumanEvalBenchmark/MBPPBenchmark. Performing a manipulation results in code injection. The attack may be initiated remotely. The exploit is now public and may be used. The project was informed of the problem early through a pull request but has not reacted yet.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Affected products

FoundationAgents · MetaGPT

public PoCs found — 1

cve_referencegithub.com/FoundationAgents/MetaGPT/issues/1942unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/FoundationAgents/MetaGPT/https://github.com/FoundationAgents/MetaGPT/issues/1942 https://github.com/FoundationAgents/MetaGPT/pull/1988 https://vuldb.com/submit/791693 https://vuldb.com/vuln/356524 https://vuldb.com/vuln/356524/cti