Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

MetaGPT — Vulnerabilities & Security Advisories 17

All 17 CVE vulnerabilities found in MetaGPT, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities associated with the software product MetaGPT, specifically focusing on implementation flaws within its multi-agent framework and related components. The collection encompasses a diverse range of reported weaknesses, including logic errors in agent orchestration, potential injection risks in prompt processing pipelines, and configuration missteps that could expose internal system states. These entries cover disclosures published from the product's initial public release through the most recent quarterly security updates, providing a comprehensive historical record of identified risks. Readers can utilize this resource to track the vendor's advisory patterns over time, analyze the prevalence of specific weakness classes within large language model applications, and review the complete vulnerability history for MetaGPT to assess its long-term security posture. By examining these aggregated records, developers and security professionals can identify recurring themes in the product's design, understand how previous issues were remediated, and anticipate potential attack surfaces that may emerge as the framework evolves. This data serves as a factual reference for risk assessment, enabling stakeholders to make informed decisions regarding the deployment and monitoring of MetaGPT in production environments without relying on fragmented or isolated security reports.

Vendor: Foundation Agents

CVE ID Title CVSS Severity Published
CVE-2026-19060 FoundationAgents MetaGPT code injection CWE-94 5.3 Medium 2026-08-06
CVE-2026-19059 FoundationAgents MetaGPT editor.py read path traversal CWE-22 3.3 Low 2026-08-06
CVE-2026-19058 FoundationAgents MetaGPT data_interpreter.py DataInterpreter code injection CWE-94 5.3 Medium 2026-08-06
CVE-2026-11455 FoundationAgents MetaGPT common.py check_cmd_exists command injection CWE-77 5.0 Medium 2026-06-07
CVE-2026-10566 FoundationAgents MetaGPT schema.py Message.check_instruct_content deserialization CWE-502 5.3 Medium 2026-06-02
CVE-2026-6111 FoundationAgents MetaGPT common.py decode_image server-side request forgery CWE-918 6.3 Medium 2026-04-12
CVE-2026-6110 FoundationAgents MetaGPT Tree-of-Thought Solver tot.py generate_thoughts code injection CWE-94 7.3 High 2026-04-12
CVE-2026-6109 FoundationAgents MetaGPT Mineflayer HTTP API index.js evaluateCode cross-site request forgery CWE-352 4.3 Medium 2026-04-12
CVE-2026-5974 FoundationAgents MetaGPT terminal.py Bash.run os command injection CWE-78 7.3 High 2026-04-09
CVE-2026-5973 FoundationAgents MetaGPT common.py get_mime_type os command injection CWE-78 7.3 High 2026-04-09
CVE-2026-5972 FoundationAgents MetaGPT terminal.py Terminal.run_command os command injection CWE-78 7.3 High 2026-04-09
CVE-2026-5971 FoundationAgents MetaGPT XML action_node.py ActionNode.xml_fill eval injection CWE-95 7.3 High 2026-04-09
CVE-2026-5970 FoundationAgents MetaGPT HumanEvalBenchmark/MBPPBenchmark check_solution code injection CWE-94 7.3 High 2026-04-09
CVE-2026-4516 Foundation Agents MetaGPT DataInterpreter write_analysis_code.py injection CWE-74 6.3 Medium 2026-03-21
CVE-2026-4515 Foundation Agents MetaGPT operator.py code_generate code injection CWE-94 6.3 Medium 2026-03-21
CVE-2026-0761 Foundation Agents MetaGPT actionoutput_str_to_mapping Code Injection Remote Code Execution Vulnerability CWE-94 9.8 - 2026-01-23
CVE-2026-0760 Foundation Agents MetaGPT deserialize_message Deserialization of Untrusted Data Remote Code Execution Vulnerability CWE-502 9.8 - 2026-01-23

All 17 known CVE vulnerabilities affecting MetaGPT with full Chinese analysis, references, and POCs where available.