CVE-2026-79407
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
A path traversal vulnerability in the SPO extension of MetaGPT 0.8.1 allows an attacker to read arbitrary files via the FILE_NAME value used by set_file_name() and load_meta_data() in metagpt/ext/spo/utils/load.py. The vulnerable code joins the attacker-controlled FILE_NAME value with the settings directory and opens the resulting path without validating that the resolved path remains within the intended directory.
Risk Assessment
An attacker can read sensitive system files, potentially leading to data exposure, credential theft, or further privilege escalation.
Recommendation
Update MetaGPT to a patched version or implement path validation to prevent access outside the intended directory.
Other vulnerabilities in MetaGPT
See all- CVE-2026-79408Critical
MetaGPT version 0.8.1 contains an OS command injection vulnerability. An attacker can execute arbitrary commands via the 'path' argument of RepoParser.rebuild_class_views() in metagpt/repo_parser.py.
- CVE-2026-19060Medium
A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.2 affecting an unknown function, allowing code injection. The attack requires local access. The exploit is publicly available and might be used. The vendor did not respond.
- CVE-2026-19059Low
A path traversal vulnerability was found in FoundationAgents MetaGPT up to version 0.8.2, affecting the read function in metagpt/tools/libs/editor.py. The attack requires local access. The exploit has been publicly disclosed and may be used. The vendor did not respond to the disclosure.
- CVE-2026-19058Medium
A vulnerability was found in FoundationAgents MetaGPT up to 0.8.2 in the DataInterpreter function of the file metagpt/roles/di/data_interpreter.py, allowing code injection. The attack must be initiated locally. The exploit is public and could be used. The vendor did not respond.
- CVE-2026-11455Medium
A vulnerability has been determined in FoundationAgents MetaGPT up to version 0.8.2, allowing command injection in the check_cmd_exists function of metagpt/utils/common.py. The attack may be initiated remotely but requires high complexity. The exploit is publicly available, and the project has not responded.
- CVE-2026-10566Medium
In MetaGPT up to version 0.8.2, the function Message.check_instruct_content in metagpt/schema.py is vulnerable to deserialization via manipulation of the mapping argument. The attack requires local access.
Original NVD description (English source)
A path traversal vulnerability in the SPO extension of MetaGPT 0.8.1 allows an attacker to read arbitrary files via the FILE_NAME value used by set_file_name() and load_meta_data() in metagpt/ext/spo/utils/load.py. The vulnerable code joins the attacker-controlled FILE_NAME value with the settings directory and opens the resulting path without validating that the resolved path remains within the intended directory.