CVE-2026-6111

all versions

A security flaw has been discovered in FoundationAgents MetaGPT up to 0.8.1. This impacts the function decode_image of the file me

6.3MEDIUM

CVE-2026-6110

all versions

A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.1. This affects the function generate_thoughts of the file me

7.3HIGH

CVE-2026-6109

<= 0.8.1

A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1. The impacted element is the function evaluateCode of the f

4.3MEDIUM

CVE-2026-5974

<= 0.8.1

A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1. The affected element is the function Bash.run in the libra

7.3HIGH

CVE-2026-5973

<= 0.8.1

A vulnerability was found in FoundationAgents MetaGPT up to 0.8.1. Impacted is the function get_mime_type of the file metagpt/util

7.3HIGH

CVE-2026-5972

<= 0.8.1

A vulnerability has been found in FoundationAgents MetaGPT up to 0.8.1. This issue affects the function Terminal.run_command in th

7.3HIGH

CVE-2026-5971

<= 0.8.1

A flaw has been found in FoundationAgents MetaGPT up to 0.8.1. This vulnerability affects the function ActionNode.xml_fill of the

7.3HIGH

CVE-2026-5970

<= 0.8.1

A vulnerability was detected in FoundationAgents MetaGPT up to 0.8.1. This affects the function check_solution of the component Hu

7.3HIGH

CVE-2026-4516

<= 0.8.1

A vulnerability was found in Foundation Agents MetaGPT up to 0.8.1. This vulnerability affects unknown code of the file metagpt/ac

6.3MEDIUM

CVE-2026-4515

<= 0.8.1

A vulnerability has been found in Foundation Agents MetaGPT up to 0.8.1. This affects the function code_generate of the file metag

6.3MEDIUM

CVE-2026-0761

all versions

Foundation Agents MetaGPT actionoutput_str_to_mapping Code Injection Remote Code Execution Vulnerability. This vulnerability allow

9.8CRITICAL

CVE-2026-0760

all versions

Foundation Agents MetaGPT deserialize_message Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerab

9.8CRITICAL

CVE-2024-23750

<= 0.6.4

MetaGPT through 0.6.4 allows the QaEngineer role to execute arbitrary code because RunCode.run_script() passes shell metacharacter

8.8HIGH