Metagpt

This hub aggregates every CVE we track for Metagpt, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Metagpt.

• CVE-2026-19060FoundationAgents MetaGPT code injection5.3Aug 6, 2026
• CVE-2026-19059FoundationAgents MetaGPT editor.py read path traversal3.3Aug 6, 2026
• CVE-2026-19058FoundationAgents MetaGPT data_interpreter.py DataInterpreter code injection5.3Aug 6, 2026
• CVE-2026-11455FoundationAgents MetaGPT common.py check_cmd_exists command injection5.0Jun 7, 2026
• CVE-2026-10566FoundationAgents MetaGPT schema.py Message.check_instruct_content deserialization5.3Jun 2, 2026
• CVE-2026-6111FoundationAgents MetaGPT common.py decode_image server-side request forgery6.3Apr 12, 2026
• CVE-2026-6110FoundationAgents MetaGPT Tree-of-Thought Solver tot.py generate_thoughts code injection7.3Apr 12, 2026
• CVE-2026-6109FoundationAgents MetaGPT Mineflayer HTTP API index.js evaluateCode cross-site request forgery4.3Apr 12, 2026
• CVE-2026-5974FoundationAgents MetaGPT terminal.py Bash.run os command injection7.3Apr 9, 2026
• CVE-2026-5973FoundationAgents MetaGPT common.py get_mime_type os command injection7.3Apr 9, 2026
• CVE-2026-5972FoundationAgents MetaGPT terminal.py Terminal.run_command os command injection7.3Apr 9, 2026
• CVE-2026-5971FoundationAgents MetaGPT XML action_node.py ActionNode.xml_fill eval injection7.3Apr 9, 2026
• CVE-2026-5970FoundationAgents MetaGPT HumanEvalBenchmark/MBPPBenchmark check_solution code injection7.3Apr 9, 2026
• CVE-2026-4516Foundation Agents MetaGPT DataInterpreter write_analysis_code.py injection6.3Mar 21, 2026
• CVE-2026-4515Foundation Agents MetaGPT operator.py code_generate code injection6.3Mar 21, 2026