CVE-2024-23750: Deepwisdom Metagpt

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

MetaGPT through 0.6.4 allows the QaEngineer role to execute arbitrary code because RunCode.run_script() passes shell metacharacters to subprocess.Popen.

Affected products

• Deepwisdom Metagpt: up to and including 0.6.4

Published 2024-01-22. Last modified 2026-06-17.