Deepwisdom Metagpt vulnerabilities

CVE-2026-0761 [CRITICAL] CWE-94 CVE-2026-0761: Foundation Agents MetaGPT actionoutput_str_to_mapping Code Injection Remote Code Execution Vulnerabi Foundation Agents MetaGPT actionoutput_str_to_mapping Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foundation Agents MetaGPT. Authentication is not required to exploit this vulnerability. The specific flaw exists within the actionoutput_str_to_ma

CVE-2026-0760 [CRITICAL] CWE-502 CVE-2026-0760: Foundation Agents MetaGPT deserialize_message Deserialization of Untrusted Data Remote Code Executio Foundation Agents MetaGPT deserialize_message Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foundation Agents MetaGPT. Authentication is not required to exploit this vulnerability. The specific flaw exists within the deserializ

CVE-2026-5973 [CRITICAL] CWE-77 CVE-2026-5973: A vulnerability was found in FoundationAgents MetaGPT up to 0.8.1. Impacted is the function get_mime A vulnerability was found in FoundationAgents MetaGPT up to 0.8.1. Impacted is the function get_mime_type of the file metagpt/utils/common.py. The manipulation results in os command injection. The attack can be executed remotely. The exploit has been made public and could be used. The project was informed of the problem early through a pull request b

CVE-2026-5974 [CRITICAL] CWE-77 CVE-2026-5974: A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1. The affected element is the A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1. The affected element is the function Bash.run in the library metagpt/tools/libs/terminal.py. This manipulation causes os command injection. The attack is possible to be carried out remotely. The project was informed of the problem early through a pull request but has not reacted y

CVE-2026-5972 [CRITICAL] CWE-77 CVE-2026-5972: A vulnerability has been found in FoundationAgents MetaGPT up to 0.8.1. This issue affects the funct A vulnerability has been found in FoundationAgents MetaGPT up to 0.8.1. This issue affects the function Terminal.run_command in the library metagpt/tools/libs/terminal.py. The manipulation leads to os command injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The identifier of the p

CVE-2026-5970 [CRITICAL] CWE-74 CVE-2026-5970: A vulnerability was detected in FoundationAgents MetaGPT up to 0.8.1. This affects the function chec A vulnerability was detected in FoundationAgents MetaGPT up to 0.8.1. This affects the function check_solution of the component HumanEvalBenchmark/MBPPBenchmark. Performing a manipulation results in code injection. The attack may be initiated remotely. The exploit is now public and may be used. The project was informed of the problem early through a

CVE-2026-6110 [CRITICAL] CWE-74 CVE-2026-6110: A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.1. This affects the function ge A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.1. This affects the function generate_thoughts of the file metagpt/strategy/tot.py of the component Tree-of-Thought Solver. The manipulation leads to code injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The project was

CVE-2026-5971 [CRITICAL] CWE-94 CVE-2026-5971: A flaw has been found in FoundationAgents MetaGPT up to 0.8.1. This vulnerability affects the functi A flaw has been found in FoundationAgents MetaGPT up to 0.8.1. This vulnerability affects the function ActionNode.xml_fill of the file metagpt/actions/action_node.py of the component XML Handler. Executing a manipulation can lead to improper neutralization of directives in dynamically evaluated code. The attack may be launched remotely. The exploit h

CVE-2024-23750 [HIGH] CWE-94 CVE-2024-23750: MetaGPT through 0.6.4 allows the QaEngineer role to execute arbitrary code because RunCode.run_scrip MetaGPT through 0.6.4 allows the QaEngineer role to execute arbitrary code because RunCode.run_script() passes shell metacharacters to subprocess.Popen.

CVE-2026-6109 [HIGH] CWE-352 CVE-2026-6109: A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1. The impacted element is the A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1. The impacted element is the function evaluateCode of the file metagpt/environment/minecraft/mineflayer/index.js of the component Mineflayer HTTP API. Executing a manipulation can lead to cross-site request forgery. The attack may be performed from remote. The exploit has been publicl

CVE-2026-4515 [MEDIUM] CWE-74 CVE-2026-4515: A vulnerability has been found in Foundation Agents MetaGPT up to 0.8.1. This affects the function c A vulnerability has been found in Foundation Agents MetaGPT up to 0.8.1. This affects the function code_generate of the file metagpt/ext/aflow/scripts/operator.py. The manipulation leads to code injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about t

CVE-2026-4516 [MEDIUM] CWE-74 CVE-2026-4516: A vulnerability was found in Foundation Agents MetaGPT up to 0.8.1. This vulnerability affects unkno A vulnerability was found in Foundation Agents MetaGPT up to 0.8.1. This vulnerability affects unknown code of the file metagpt/actions/di/write_analysis_code.py of the component DataInterpreter. The manipulation results in injection. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contac

CVE-2026-6111 [MEDIUM] CWE-918 CVE-2026-6111: A security flaw has been discovered in FoundationAgents MetaGPT up to 0.8.1. This impacts the functi A security flaw has been discovered in FoundationAgents MetaGPT up to 0.8.1. This impacts the function decode_image of the file metagpt/utils/common.py. The manipulation of the argument img_url_or_b64 results in server-side request forgery. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for at