TI-2026-05355 CVE-2026-6111 · GHSA-r5v8-c28h-f8r8
FoundationAgents MetaGPT common.py decode_image server-side request forgery
Priority MEDIUM 57
A security flaw has been discovered in FoundationAgents MetaGPT up to 0.8.1.
Vulnerabilities
13 records
TI-2026-05354 CVE-2026-6110 · GHSA-xr7v-m9px-q4qj
FoundationAgents MetaGPT Tree-of-Thought Solver tot.py generate_thoughts code injection
Priority HIGH 70
A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.1.
TI-2026-05353 CVE-2026-6109 · GHSA-w287-wwhf-95vv
FoundationAgents MetaGPT Mineflayer HTTP API index.js evaluateCode cross-site request forgery
Priority MEDIUM 57
A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1.
TI-2026-05237 CVE-2026-5974 · GHSA-fcc8-4q7h-wvwc
FoundationAgents MetaGPT terminal.py Bash.run os command injection
Priority HIGH 70
A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1.
TI-2026-05236 CVE-2026-5973 · GHSA-qw5f-qpq5-ppfg
FoundationAgents MetaGPT common.py get_mime_type os command injection
Priority HIGH 70
A vulnerability was found in FoundationAgents MetaGPT up to 0.8.1.
TI-2026-05235 CVE-2026-5972 · GHSA-wp29-qmvj-frvp
FoundationAgents MetaGPT terminal.py Terminal.run_command os command injection
Priority HIGH 70
A vulnerability has been found in FoundationAgents MetaGPT up to 0.8.1.
TI-2026-05234 CVE-2026-5971 · GHSA-3ghp-8r47-4gj4
FoundationAgents MetaGPT XML action_node.py ActionNode.xml_fill eval injection
Priority HIGH 70
A flaw has been found in FoundationAgents MetaGPT up to 0.8.1.
TI-2026-05233 CVE-2026-5970 · GHSA-g977-h85w-h2xj
FoundationAgents MetaGPT HumanEvalBenchmark/MBPPBenchmark check_solution code injection
Priority HIGH 70
A vulnerability was detected in FoundationAgents MetaGPT up to 0.8.1.
TI-2026-03925 CVE-2026-4516 · GHSA-xwvj-r2ph-6xqj
Foundation Agents MetaGPT DataInterpreter write_analysis_code.py injection
Priority MEDIUM 57
A vulnerability was found in Foundation Agents MetaGPT up to 0.8.1.
TI-2026-03924 CVE-2026-4515 · GHSA-6qq6-2j27-fq65
Foundation Agents MetaGPT operator.py code_generate code injection
Priority MEDIUM 57
A vulnerability has been found in Foundation Agents MetaGPT up to 0.8.1.
TI-2026-00547 CVE-2026-0761 · GHSA-rj73-q8hx-cvvm
Code injection in FoundationAgents MetaGPT
Priority MEDIUM 54
Foundation Agents MetaGPT actionoutput_str_to_mapping Code Injection Remote Code Execution Vulnerability.
TI-2026-00546 CVE-2026-0760 · GHSA-3xp7-v582-9h3c
Deserialization of untrusted data in FoundationAgents MetaGPT
Priority MEDIUM 52
Foundation Agents MetaGPT deserialize_message Deserialization of Untrusted Data Remote Code Execution Vulnerability.
TI-2024-15753 CVE-2024-23750 · GHSA-g7ph-8423-pf4j
MetaGPT through 0.6.4 allows the QaEngineer role to execute arbitrary code because…
Priority HIGH 73
MetaGPT through 0.6.4 allows the QaEngineer role to execute arbitrary code because RunCode.run_script() passes shell metacharacters to subprocess.Popen.