Vendors / FoundationAgents Records 18 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 1
Exploited now FoundationAgents records in CISA KEV No FoundationAgents vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 73
MetaGPT through 0.6.4 allows the QaEngineer role to execute arbitrary code because RunCode.run_script() passes shell metacharacters to subprocess.Popen.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0096 · Published 2024-01-22 · No fix listed CWE-94
Priority HIGH 70
A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.1.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00409 · Published 2026-04-12 · No fix listed CWE-74
Priority HIGH 70
A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.02559 · Published 2026-04-09 · No fix listed CWE-77
Priority HIGH 70
A vulnerability was found in FoundationAgents MetaGPT up to 0.8.1.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.02608 · Published 2026-04-09 · No fix listed CWE-77
Priority HIGH 70
A vulnerability has been found in FoundationAgents MetaGPT up to 0.8.1.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.02659 · Published 2026-04-09 · Fixed in 0.8.2 CWE-77
Priority HIGH 70
A flaw has been found in FoundationAgents MetaGPT up to 0.8.1.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00403 · Published 2026-04-09 · No fix listed CWE-94
Priority HIGH 70
A vulnerability was detected in FoundationAgents MetaGPT up to 0.8.1.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00403 · Published 2026-04-09 · No fix listed CWE-74
Priority MEDIUM 57
A security flaw has been discovered in FoundationAgents MetaGPT up to 0.8.1.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00263 · Published 2026-04-12 · No fix listed CWE-918
Priority MEDIUM 57
A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1.
CVSS 4.0 MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00224 · Published 2026-04-12 · No fix listed CWE-352
Priority MEDIUM 57
A vulnerability was found in Foundation Agents MetaGPT up to 0.8.1.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00255 · Published 2026-03-21 · No fix listed CWE-707
Priority MEDIUM 57
A vulnerability has been found in Foundation Agents MetaGPT up to 0.8.1.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00255 · Published 2026-03-21 · No fix listed CWE-74
Priority MEDIUM 54
Foundation Agents MetaGPT actionoutput_str_to_mapping Code Injection Remote Code Execution Vulnerability.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02517 · Published 2026-01-23 · No fix listed CWE-94
Priority MEDIUM 52
Foundation Agents MetaGPT deserialize_message Deserialization of Untrusted Data Remote Code Execution Vulnerability.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01438 · Published 2026-01-23 · No fix listed CWE-502
Open these records in search → All records by CVSS severity
2 1 14 1 0
THREATIST.IORead the docs