CyberSecBulletin

Foundation Agents vulnerabilities

We track 2 vulnerabilities in Foundation Agents products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 23, 2026.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest Foundation Agents vulnerabilities

  • 9.8 Critical severity

    MetaGPT: Improper Control of Generation of Code

    CVE-2026-0761Foundation AgentsEPSS 2.52%

    Foundation Agents MetaGPT actionoutput_str_to_mapping Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foundation Agents MetaGPT. Authentication is not require

  • 9.8 Critical severity

    MetaGPT: Deserialization of Untrusted Data

    CVE-2026-0760Foundation AgentsEPSS 1.44%

    Foundation Agents MetaGPT deserialize_message Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foundation Agents MetaGPT. Authentication is