CVE-2026-5971 MEDIUM

CVE-2026-5971: FoundationAgents MetaGPT XML action_node.py ActionNode.xml_fill eval injection

Vendor Foundationagents
Product MetaGPT
Weakness CWE-95 · Eval injection
Published April 9, 2026
Last update April 13, 2026

CVSS base score

6.9/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A flaw has been found in FoundationAgents MetaGPT up to 0.8.1. This vulnerability affects the function ActionNode.xml_fill of the file metagpt/actions/action_node.py of the component XML Handler. Executing a manipulation can lead to improper neutralization of directives in dynamically evaluated code. The attack may be launched remotely. The exploit has been published and may be used. The project was informed of the problem early through a pull request but has not reacted yet.

Key dates

02Disclosure timeline

April 9, 2026 CVE published
April 13, 2026 Record updated