CVE-2026-79408

Description

An OS command injection vulnerability in MetaGPT 0.8.1 allows an attacker to execute arbitrary commands via the path argument of RepoParser.rebuild_class_views() in metagpt/repo_parser.py.

CVSS Vector

References

• https://github.com/REYu6/Metagpt-vul/blob/main/CVE-1-MetaGPT-command-injection.md
• https://github.com/REYu6/Metagpt-vul/blob/main/CVE-1-MetaGPT-command-injection.md