This vulnerability in FoundationAgents MetaGPT up to version 0.8.2 allows an attacker with local access to perform code injection via manipulation of an unknown function. The CVSS 4.8 score reflects the need for local privileges and limited impact scope. The vendor has not provided any response or patch, and no official remediation guidance is available. Exploit code is publicly accessible, increasing the risk of exploitation in environments where local access is possible.

Successful exploitation allows an attacker with local access to inject and execute arbitrary code within the affected MetaGPT application. This could lead to unauthorized code execution and potential compromise of the local system or application context. Remote exploitation is not possible according to the available data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official fix is available, users should restrict local access to trusted users only and monitor for suspicious local activity. Consider isolating or sandboxing the affected application until a patch or official mitigation is released.