MetaGPT vulnerabilities

2 known vulnerabilities in MetaGPT from Foundation Agents. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  MetaGPT: Improper Control of Generation of Code

  CVE-2026-0761Jan 23, 2026Foundation AgentsEPSS 2.52%

  Foundation Agents MetaGPT actionoutput_str_to_mapping Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foundation Agents MetaGPT. Authentication is not require

• 9.8 Critical severity

  MetaGPT: Deserialization of Untrusted Data

  CVE-2026-0760Jan 23, 2026Foundation AgentsEPSS 1.44%

  Foundation Agents MetaGPT deserialize_message Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foundation Agents MetaGPT. Authentication is