A critical OS command injection vulnerability in MetaGPT 0.8.1 allows unauthenticated remote attackers to achieve full system compromise.

This is an OS command injection flaw located within the path argument of the RepoParser.rebuild_class_views method in metagpt/repo_parser.py. The vulnerability is exploitable by an unauthenticated attacker, as indicated by the CVSS attack vector (AV:N/PR:N).

Successful exploitation of this vulnerability allows for the execution of arbitrary commands with the privileges of the MetaGPT process, potentially leading to a total loss of confidentiality, integrity, and availability. With a CVSS score of 9.8, this flaw represents a critical risk that could result in full server takeover, data exfiltration, or the deployment of ransomware within the host environment.

Immediate Action: Restrict network access to the affected service immediately and investigate the MetaGPT repository for official security patches or version updates.

Proactive Monitoring: Review system logs for suspicious process execution patterns or unexpected command-line arguments originating from the web application environment.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block malicious payloads targeting system command injection patterns in HTTP requests.

Public Exploit Available: Yes, a published proof-of-concept exists and is attributed to the security researcher's write-up referenced in the CVE record.

Given the critical severity and the existence of a public proof-of-concept, organizations running MetaGPT 0.8.1 must prioritize remediation. If a vendor-supplied patch is not yet available, consider isolating the instance from the internet or disabling the vulnerable functionality until a secure version is released.