Advisories · Technology

Foundation Agents MetaGPT.

Every CVE that names Foundation Agents MetaGPT among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-4516 CVE record

CVSS 5.3 Medium

Foundation Agents MetaGPT DataInterpreter write_analysis_code.py injection
- Foundation Agents MetaGPT
- Other injection
- CWE-707
Not analysed yet 21 Mar 2026
CVE-2026-4515 CVE record

CVSS 5.3 Medium

Foundation Agents MetaGPT operator.py code_generate code injection
- Foundation Agents MetaGPT
- Other injection
- Code injection
Not analysed yet 21 Mar 2026
CVE-2026-0761 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Foundation Agents MetaGPT actionoutput_str_to_mapping Code Injection Remote Code Execution Vulnerability
- Foundation Agents MetaGPT
- Code injection
Not analysed yet 23 Jan 2026
CVE-2026-0760 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Foundation Agents MetaGPT deserialize_message Deserialization of Untrusted Data Remote Code Execution Vulnerability
- Foundation Agents MetaGPT
- Insecure deserialization
Not analysed yet 23 Jan 2026