What’s Vulnerable › Products
FoundationAgents MetaGPT vulnerabilities
18 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 17 published in the last 12 months.
Check whether your FoundationAgents MetaGPT version is affected
Latest FoundationAgents MetaGPT vulnerabilities
- CVE-2026-19060 — FoundationAgents MetaGPT code injection (CVSS 5.3)
- CVE-2026-19059 — FoundationAgents MetaGPT editor.py read path traversal (CVSS 3.3)
- CVE-2026-19058 — FoundationAgents MetaGPT data_interpreter.py DataInterpreter code injection (CVSS 5.3)
- CVE-2026-11455 — FoundationAgents MetaGPT common.py check_cmd_exists command injection (CVSS 5.0)
- CVE-2026-10566 — FoundationAgents MetaGPT schema.py Message.check_instruct_content deserialization (CVSS 5.3)
- CVE-2026-6111 — FoundationAgents MetaGPT common.py decode_image server-side request forgery (CVSS 6.5)
- CVE-2026-6110 — FoundationAgents MetaGPT Tree-of-Thought Solver tot.py generate_thoughts code injection (CVSS 9.8)
- CVE-2026-6109 — FoundationAgents MetaGPT Mineflayer HTTP API index.js evaluateCode cross-site request forgery (CVSS 8.8)
- CVE-2026-5974 — FoundationAgents MetaGPT terminal.py Bash.run os command injection (CVSS 9.8)
- CVE-2026-5973 — FoundationAgents MetaGPT common.py get_mime_type os command injection (CVSS 9.8)
- CVE-2026-5972 — FoundationAgents MetaGPT terminal.py Terminal.run_command os command injection (CVSS 9.8)
- CVE-2026-5971 — FoundationAgents MetaGPT XML action_node.py ActionNode.xml_fill eval injection (CVSS 9.8)
- CVE-2026-5970 — FoundationAgents MetaGPT HumanEvalBenchmark/MBPPBenchmark check_solution code injection (CVSS 9.8)
- CVE-2026-4516 — Foundation Agents MetaGPT DataInterpreter write_analysis_code.py injection (CVSS 6.3)
- CVE-2026-4515 — Foundation Agents MetaGPT operator.py code_generate code injection (CVSS 6.3)
- CVE-2026-0761 — Foundation Agents MetaGPT actionoutput_str_to_mapping Code Injection Remote Code Execution Vulnerability (CVSS 9.8)
- CVE-2026-0760 — Foundation Agents MetaGPT deserialize_message Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 9.8)
- CVE-2024-23750 — (CVSS 8.8)