Deepwisdom: Security Vulnerabilities
MetaGPT through 0.6.4 allows the QaEngineer role to execute arbitrary code because RunCode.run_script() passes shell metacharacters to subprocess.Popen.
CVSS Score
8.8
EPSS Score
0.005
Published
2024-01-22