This vulnerability affects the ActionNode.xml_fill function in the metagpt/actions/action_node.py file of FoundationAgents MetaGPT (up to version 0.8.1). It results from improper neutralization of directives in dynamically evaluated code, which can be triggered remotely without privileges or user interaction. The CVSS 4.0 base score is 6.9 (medium severity), reflecting network attack vector, low complexity, no privileges required, no user interaction, and limited confidentiality, integrity, and availability impacts. The vulnerability was responsibly disclosed early via a pull request, but no patch or official remediation has been provided by the vendor as of the published date.

Successful exploitation of this vulnerability could allow an attacker to manipulate dynamically evaluated code directives remotely, potentially causing unintended code execution or logic manipulation within the affected component. The impact is rated medium with limited confidentiality, integrity, and availability effects. No known exploits in the wild have been reported at this time.

As of the published date, no official fix or patch is available from the vendor. The vendor has not yet responded with a remediation. Users should monitor the vendor's channels for updates and consider applying any community or pull request-based mitigations cautiously. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.