CyberRota Analysis
AI-GeneratedA path traversal vulnerability in the SPO extension of MetaGPT 0.8.1 enables attackers to read arbitrary files by manipulating the FILE_NAME parameter in specific functions. This flaw occurs due to inadequate validation of file paths, potentially exposing sensitive information stored on the server. Organizations using this version of MetaGPT should prioritize patching this vulnerability to mitigate the risk of unauthorized data access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A path traversal vulnerability in the SPO extension of MetaGPT 0.8.1 allows an attacker to read arbitrary files via the FILE_NAME value used by set_file_name() and load_meta_data() in metagpt/ext/spo/utils/load.py. The vulnerable code joins the attacker-controlled FILE_NAME value with the settings directory and opens the resulting path without validating that the resolved path remains within the intended directory.