MetaGPT version 0.8.1 contains a high-severity path traversal vulnerability that permits unauthenticated remote attackers to access sensitive files on the host system.

This is a path traversal vulnerability located in the metagpt/ext/spo/utils/load.py file. An unauthenticated attacker can supply a crafted FILE_NAME parameter to the set_file_name and load_meta_data functions, which lack sufficient input validation, allowing the attacker to escape the intended directory and read arbitrary system files.

The ability for an unauthenticated attacker to read arbitrary files poses a significant risk to data confidentiality. This vulnerability could lead to the exposure of sensitive configuration files, environment variables, or proprietary data, potentially facilitating further attacks or system compromise. With a CVSS score of 7.5, this high-severity flaw requires immediate attention to prevent unauthorized data exfiltration.

Immediate Action: Since no official patch is currently available, users should restrict access to the affected MetaGPT instance to trusted networks only and disable the SPO extension if it is not strictly required for business operations.

Proactive Monitoring: Security teams should monitor web server and application access logs for directory traversal patterns, such as sequences of dot-dot-slash (../) characters in file-related requests.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block directory traversal attempts and inspect inbound requests to the SPO extension endpoint for malicious path manipulation.

Public Exploit Available: Yes, a published proof-of-concept exists, as documented in the technical write-up provided in the referenced security research.

Given the high CVSS score and the existence of a public proof-of-concept, this vulnerability poses a credible risk to any environment running MetaGPT 0.8.1. Organizations should prioritize isolating affected systems from the internet and applying vendor-supplied updates as soon as they become available. Failure to address this flaw could lead to unauthorized access to sensitive system information.