FoundationAgents vulnerabilities
13 published CVEs name FoundationAgents among the affected products.
- Published CVEs
- 13
- Last 12 months
- 13
- Critical
- 0
- Known exploited
- 0
Critical 0High 0Medium 12Low 1Not scored 0
Newest CVEs
- CVE-2026-19060
FoundationAgents MetaGPT code injection
FoundationAgents · MetaGPT
Medium4.8 - CVE-2026-19059
FoundationAgents MetaGPT editor.py read path traversal
FoundationAgents · MetaGPT
Medium4.8 - CVE-2026-19058
FoundationAgents MetaGPT data_interpreter.py DataInterpreter code injection
FoundationAgents · MetaGPT
Medium4.8 - CVE-2026-11455
FoundationAgents MetaGPT common.py check_cmd_exists command injection
FoundationAgents · MetaGPT
Low2.3 - CVE-2026-10566
FoundationAgents MetaGPT schema.py Message.check_instruct_content deserialization
FoundationAgents · MetaGPT
Medium4.8 - CVE-2026-6111
FoundationAgents MetaGPT common.py decode_image server-side request forgery
FoundationAgents · MetaGPT
Medium5.3 - CVE-2026-6110
FoundationAgents MetaGPT Tree-of-Thought Solver tot.py generate_thoughts code injection
FoundationAgents · MetaGPT
Medium6.9 - CVE-2026-6109
FoundationAgents MetaGPT Mineflayer HTTP API index.js evaluateCode cross-site request forgery
FoundationAgents · MetaGPT
Medium5.3 - CVE-2026-5974
FoundationAgents MetaGPT terminal.py Bash.run os command injection
FoundationAgents · MetaGPT
Medium6.9 - CVE-2026-5973
FoundationAgents MetaGPT common.py get_mime_type os command injection
FoundationAgents · MetaGPT
Medium6.9
Products with the most CVEs
Most common weaknesses
- CWE-74 Injection5
- CWE-94 Code injection5
- CWE-77 Command injection4
- CWE-78 OS command injection3
- CWE-20 Improper input validation1
- CWE-22 Path traversal1
- CWE-352 Cross-site request forgery (CSRF)1
- CWE-502 Deserialization of untrusted data1
- CWE-862 Missing authorization1
- CWE-918 Server-side request forgery (SSRF)1