FoundationAgents vulnerabilities
We track 7 vulnerabilities in FoundationAgents products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on April 12, 2026.
Latest FoundationAgents vulnerabilities
- 9.8 Critical severity
MetaGPT: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.1. This affects the function generate_thoughts of the file metagpt/strategy/tot.py of the component Tree-of-Thought Solver. The manipulation leads to code injection. It is possible to initiat
- 8.8 High severity
MetaGPT: Cross-Site Request Forgery
A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1. The impacted element is the function evaluateCode of the file metagpt/environment/minecraft/mineflayer/index.js of the component Mineflayer HTTP API. Executing a manipulation can lead to c
- 9.8 Critical severity
MetaGPT: Improper Neutralization of Special Elements used in a Command
A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1. The affected element is the function Bash.run in the library metagpt/tools/libs/terminal.py. This manipulation causes os command injection. The attack is possible to be carried out remotel
- 9.8 Critical severity
MetaGPT: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in FoundationAgents MetaGPT up to 0.8.1. Impacted is the function get_mime_type of the file metagpt/utils/common.py. The manipulation results in os command injection. The attack can be executed remotely. The exploit has been made publ
- 9.8 Critical severity
MetaGPT: Improper Neutralization of Special Elements used in a Command
A vulnerability has been found in FoundationAgents MetaGPT up to 0.8.1. This issue affects the function Terminal.run_command in the library metagpt/tools/libs/terminal.py. The manipulation leads to os command injection. Remote exploitation of the attack is pos
- 9.8 Critical severity
MetaGPT: Improper Control of Generation of Code
A flaw has been found in FoundationAgents MetaGPT up to 0.8.1. This vulnerability affects the function ActionNode.xml_fill of the file metagpt/actions/action_node.py of the component XML Handler. Executing a manipulation can lead to improper neutralization of
- 9.8 Critical severity
MetaGPT: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was detected in FoundationAgents MetaGPT up to 0.8.1. This affects the function check_solution of the component HumanEvalBenchmark/MBPPBenchmark. Performing a manipulation results in code injection. The attack may be initiated remotely. The exp