Is there a public PoC exploit available for CVE-2026-5972?

Yes, a public proof-of-concept exploit is available for CVE-2026-5972. Prioritise patching immediately. EPSS: 0.8%.

Is there a patch available for CVE-2026-5972?

Yes, a patch is available for CVE-2026-5972. Update the affected software to the latest version immediately.

Metagpt CVE-2026-5972

Q: What is the CVSS score of CVE-2026-5972?

CVE-2026-5972 has a CVSS 4.0 base score of 5.5 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.8%.

EUVD-2026-21049 MEDIUM

OS Command Injection (CWE-78)

2026-04-09 VulDB

GHSA-wp29-qmvj-frvp

Command Injection Metagpt

5.5

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

CVSS changed

Apr 29, 2026 - 01:11 NVD

6.9 (MEDIUM) 5.5 (MEDIUM)

PoC Detected

Apr 09, 2026 - 20:16 vuln.today

Public exploit code

EUVD ID Assigned

Apr 09, 2026 - 19:45 euvd

EUVD-2026-21049

Analysis Generated

Apr 09, 2026 - 19:45 vuln.today

Patch released

Apr 09, 2026 - 19:45 nvd

Patch available

CVE Published

Apr 09, 2026 - 19:00 nvd

MEDIUM 6.9

DescriptionCVE.org

A vulnerability has been found in FoundationAgents MetaGPT up to 0.8.1. This issue affects the function Terminal.run_command in the library metagpt/tools/libs/terminal.py. The manipulation leads to os command injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The identifier of the patch is d04ffc8dc67903e8b327f78ec121df5e190ffc7b. Applying a patch is the recommended action to fix this issue.

AnalysisAI

Remote code execution in FoundationAgents MetaGPT up to version 0.8.1 allows unauthenticated attackers to execute arbitrary OS commands via improper input validation in the Terminal.run_command function. The vulnerability exploits command injection in metagpt/tools/libs/terminal.py and has publicly available exploit code; patch commit d04ffc8dc67903e8b327f78ec121df5e190ffc7b is available from the vendor.

Technical ContextAI

MetaGPT is an AI-driven framework that processes agent instructions and automates tasks through tool execution. The vulnerability resides in the Terminal.run_command function within the terminal.py library module, which executes system commands without sufficient input sanitization. This is a classic OS command injection flaw (CWE-78) where user-controlled input is passed unsanitized to a system command execution primitive (likely subprocess or os.system in Python). The attack vector is network-accessible because MetaGPT likely exposes the Terminal tool through its agent interface or API, allowing remote command execution without authentication.

RemediationAI

Apply the vendor-released patch identified by commit d04ffc8dc67903e8b327f78ec121df5e190ffc7b from the MetaGPT repository. This commit addresses the input validation flaw in Terminal.run_command. Users should upgrade to a patched version released after this commit or manually apply the fix. Until patching is possible, disable or restrict access to the Terminal tool in MetaGPT configurations, and implement network-level controls to limit MetaGPT exposure. For detailed patch information and upgrade guidance, consult the FoundationAgents/MetaGPT GitHub issues (https://github.com/FoundationAgents/MetaGPT/issues/1929) and commit history (https://github.com/paipeline/MetaGPT/commit/d04ffc8dc67903e8b327f78ec121df5e190ffc7b).