This vulnerability affects the ActionNode.xml_fill function in the metagpt/actions/action_node.py file of FoundationAgents MetaGPT (up to version 0.8.1). It arises from improper neutralization of directives in dynamically evaluated code, enabling remote attackers to manipulate code execution. The vulnerability is remotely exploitable without privileges or user interaction. The CVSS 4.0 base score is 6.9 (medium severity), reflecting network attack vector, low complexity, no privileges required, no user interaction, and limited impact on confidentiality, integrity, and availability. The vendor has been informed but has not yet provided a patch or official remediation guidance.

Successful exploitation can lead to improper handling of directives in dynamically evaluated code, potentially allowing remote attackers to influence code execution flow. The impact is rated as medium severity with limited confidentiality, integrity, and availability impacts. No known exploits are reported in the wild, but a proof-of-concept exploit has been published.

No official patch or remediation is currently available from the vendor. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, users should consider restricting network exposure of vulnerable versions and monitor for any updates from the vendor. Avoid deploying affected versions in sensitive environments where remote code manipulation could have significant consequences.