FoundationAgents MetaGPT versions 0.8.0 and 0.8.1 contain an OS command injection vulnerability in the Bash.run function of the metagpt/tools/libs/terminal.py library. This flaw allows remote attackers to inject and execute arbitrary OS commands due to insufficient input validation or sanitization in the command execution logic. The vulnerability was responsibly disclosed early, but no patch or official remediation has been released as of the publication date.

Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary operating system commands on the affected system with the privileges of the MetaGPT process. This could lead to unauthorized system access, data compromise, or further system manipulation. However, no known exploits in the wild have been reported to date.

As of the current information, no official patch or remediation is available from the vendor. Users should monitor the FoundationAgents MetaGPT project for updates or security advisories. Until a fix is released, avoid exposing vulnerable versions to untrusted networks or inputs that could trigger command injection. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.