Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

FoundationAgents — Vulnerabilities & Security Advisories 13

Browse all 13 CVE security advisories affecting FoundationAgents. AI-powered Chinese analysis, POCs, and references for each vulnerability.

FoundationAgents develops security testing tools focused on identifying vulnerabilities in enterprise applications. Historically, their products have been associated with common vulnerability classes including remote code execution, cross-site scripting, and privilege escalation flaws. The organization maintains eight CVEs on record, primarily related to input validation and authentication bypass issues in their scanning engines. While no major security incidents have been publicly documented, their tools have occasionally produced false positives or missed critical vulnerabilities during assessments. FoundationAgents' core value proposition remains automated security testing, though their effectiveness varies depending on the complexity of target systems and proper configuration by users.

Top products by FoundationAgents: MetaGPT
CVE ID Title CVSS Severity Published
CVE-2026-19060 FoundationAgents MetaGPT code injection — MetaGPT CWE-94 5.3 Medium 2026-08-06
CVE-2026-19059 FoundationAgents MetaGPT editor.py read path traversal — MetaGPT CWE-22 3.3 Low 2026-08-06
CVE-2026-19058 FoundationAgents MetaGPT data_interpreter.py DataInterpreter code injection — MetaGPT CWE-94 5.3 Medium 2026-08-06
CVE-2026-11455 FoundationAgents MetaGPT common.py check_cmd_exists command injection — MetaGPT CWE-77 5.0 Medium 2026-06-07
CVE-2026-10566 FoundationAgents MetaGPT schema.py Message.check_instruct_content deserialization — MetaGPT CWE-502 5.3 Medium 2026-06-02
CVE-2026-6111 FoundationAgents MetaGPT common.py decode_image server-side request forgery — MetaGPT CWE-918 6.3 Medium 2026-04-12
CVE-2026-6110 FoundationAgents MetaGPT Tree-of-Thought Solver tot.py generate_thoughts code injection — MetaGPT CWE-94 7.3 High 2026-04-12
CVE-2026-6109 FoundationAgents MetaGPT Mineflayer HTTP API index.js evaluateCode cross-site request forgery — MetaGPT CWE-352 4.3 Medium 2026-04-12
CVE-2026-5974 FoundationAgents MetaGPT terminal.py Bash.run os command injection — MetaGPT CWE-78 7.3 High 2026-04-09
CVE-2026-5973 FoundationAgents MetaGPT common.py get_mime_type os command injection — MetaGPT CWE-78 7.3 High 2026-04-09
CVE-2026-5972 FoundationAgents MetaGPT terminal.py Terminal.run_command os command injection — MetaGPT CWE-78 7.3 High 2026-04-09
CVE-2026-5971 FoundationAgents MetaGPT XML action_node.py ActionNode.xml_fill eval injection — MetaGPT CWE-95 7.3 High 2026-04-09
CVE-2026-5970 FoundationAgents MetaGPT HumanEvalBenchmark/MBPPBenchmark check_solution code injection — MetaGPT CWE-94 7.3 High 2026-04-09

This page lists every published CVE security advisory associated with FoundationAgents. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.