This vulnerability in FoundationAgents MetaGPT up to version 0.8.2 allows an attacker with local access to manipulate file paths in the read function of metagpt/tools/libs/editor.py, leading to path traversal. This could enable unauthorized reading of files outside the intended directory. The exploit has been publicly disclosed, but no official remediation or patch has been provided by the vendor as of the publication date.

An attacker with local access can exploit this vulnerability to read arbitrary files on the system by manipulating file paths. This could lead to unauthorized disclosure of sensitive information. There is no indication of remote exploitation or privilege escalation from the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or provided a fix, users should restrict local access to trusted users only and monitor for any suspicious local activity related to MetaGPT until an official patch is released.