| Название | FoundationAgents MetaGPT 0.8.1 Cross Site Request Forgery (CWE-352) |
|---|
| Описание | # Technical Details
A Cross-Site Request Forgery (CSRF) vulnerability exists in the Mineflayer HTTP API of MetaGPT (metagpt/environment/minecraft/mineflayer/index.js), leading to unauthenticated Remote Code Execution (RCE).
The Express.js server runs locally and exposes a /step endpoint that accepts arbitrary JavaScript code via req.body.code and executes it directly through the unsafe eval() function (evaluateCode()). This endpoint has no authentication checks and lacks CORS protection. Additionally, the server binds to x.x.x.x by default.
# Vulnerable Code
File: metagpt/environment/minecraft/mineflayer/index.js
Method: app.post("/step", ...) & evaluateCode()
Why: The server accepts POST requests containing raw JavaScript code and directly interpolates it into an eval() statement without restricting origin (CORS) or verifying the caller's identity.
# Reproduction
1. Start the MetaGPT Mineflayer HTTP server locally on port 3000.
2. An attacker hosts a malicious HTML page with JavaScript that performs a blind POST request using fetch('http://127.0.0.1:3000/step', { method: 'POST', body: JSON.stringify({ code: "require('child_process').execSync('touch /tmp/csrf_rce_proof')", programs: "" }), mode: 'no-cors' }).
3. A victim running the Mineflayer server visits the attacker's page.
4. The JavaScript payload executes on the victim's machine. Verify /tmp/csrf_rce_proof exists.
# Impact
- Remote Code Execution (RCE): An attacker can execute arbitrary system commands, exfiltrate data, or establish a reverse shell simply by tricking the victim into opening a malicious webpage while the Mineflayer environment is running. |
|---|
| Источник | ⚠️ https://github.com/FoundationAgents/MetaGPT/issues/1932 |
|---|
| Пользователь | Eric-d (UID 96861) |
|---|
| Представление | 28.03.2026 04:36 (6 месяцы назад) |
|---|
| Модерация | 11.04.2026 09:49 (14 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 356969 [FoundationAgents MetaGPT до 0.8.1 Mineflayer HTTP API index.js evaluateCode подделка межсайтовых запросов] |
|---|
| Баллы | 20 |
|---|