Deepwisdom
Deepwisdom Metagpt: vulnerabilidades y CVE
Deepwisdom Metagpt tiene 20 vulnerabilidades publicadas, 19 de ellas en los últimos 12 meses. 3 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE20
Últimos 12 meses19
Críticas3
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-79408 | Crítica (9.8) | 2.1% | — | 31 ago 2026 | An OS command injection vulnerability in MetaGPT 0.8.1 allows an attacker to execute arbitrary commands via the path argument of RepoParser.rebuild_class_views() in metagpt/repo_parser.py. |
| CVE-2026-79407 | Alta (7.5) | 0.50% | — | 31 ago 2026 | A path traversal vulnerability in the SPO extension of MetaGPT 0.8.1 allows an attacker to read arbitrary files via the FILE_NAME value used by set_file_name() and load_meta_data() in metagpt/ext/spo/utils/load.py. The… |
| CVE-2026-19060 | Baja (1.9) | 0.20% | — | 6 ago 2026 | A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.2. This impacts an unknown function. Such manipulation leads to code injection. The attack needs to be performed locally. The exploit is publicly… |
| CVE-2026-19059 | Baja (1.9) | 0.21% | — | 6 ago 2026 | A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.2. This affects the function read of the file metagpt/tools/libs/editor.py. This manipulation causes path traversal. The attack needs to be launched… |
| CVE-2026-19058 | Baja (1.9) | 0.19% | — | 6 ago 2026 | A vulnerability was found in FoundationAgents MetaGPT up to 0.8.2. The impacted element is the function DataInterpreter of the file metagpt/roles/di/data_interpreter.py. The manipulation results in code injection. The… |
| CVE-2026-11455 | Baja (1.3) | 0.94% | — | 7 jun 2026 | A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.2. Affected by this issue is the function check_cmd_exists of the file metagpt/utils/common.py. This manipulation of the argument mermaid.path causes… |
| CVE-2026-10566 | Baja (1.9) | 0.12% | — | 2 jun 2026 | A weakness has been identified in FoundationAgents MetaGPT up to 0.8.2. This affects the function Message.check_instruct_content of the file metagpt/schema.py. Executing a manipulation of the argument mapping can lead… |
| CVE-2026-6111 | Baja (2.1) | 0.37% | — | 12 abr 2026 | A security flaw has been discovered in FoundationAgents MetaGPT up to 0.8.1. This impacts the function decode_image of the file metagpt/utils/common.py. The manipulation of the argument img_url_or_b64 results in… |
| CVE-2026-6110 | Media (5.5) | 0.71% | — | 12 abr 2026 | A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.1. This affects the function generate_thoughts of the file metagpt/strategy/tot.py of the component Tree-of-Thought Solver. The manipulation leads to… |
| CVE-2026-6109 | Baja (2.1) | 0.29% | — | 12 abr 2026 | A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1. The impacted element is the function evaluateCode of the file metagpt/environment/minecraft/mineflayer/index.js of the component Mineflayer HTTP… |
| CVE-2026-5974 | Media (6.9) | 3.5% | — | 9 abr 2026 | A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1. The affected element is the function Bash.run in the library metagpt/tools/libs/terminal.py. This manipulation causes os command injection. The… |
| CVE-2026-5973 | Media (5.5) | 3.5% | — | 9 abr 2026 | A vulnerability was found in FoundationAgents MetaGPT up to 0.8.1. Impacted is the function get_mime_type of the file metagpt/utils/common.py. The manipulation results in os command injection. The attack can be executed… |
| CVE-2026-5972 | Media (5.5) | 3.5% | — | 9 abr 2026 | A vulnerability has been found in FoundationAgents MetaGPT up to 0.8.1. This issue affects the function Terminal.run_command in the library metagpt/tools/libs/terminal.py. The manipulation leads to os command injection.… |
| CVE-2026-5971 | Media (5.5) | 0.71% | — | 9 abr 2026 | A flaw has been found in FoundationAgents MetaGPT up to 0.8.1. This vulnerability affects the function ActionNode.xml_fill of the file metagpt/actions/action_node.py of the component XML Handler. Executing a… |
| CVE-2026-5970 | Media (5.5) | 0.71% | — | 9 abr 2026 | A vulnerability was detected in FoundationAgents MetaGPT up to 0.8.1. This affects the function check_solution of the component HumanEvalBenchmark/MBPPBenchmark. Performing a manipulation results in code injection. The… |
| CVE-2026-4516 | Baja (2.1) | 0.43% | — | 21 mar 2026 | A vulnerability was found in Foundation Agents MetaGPT up to 0.8.1. This vulnerability affects unknown code of the file metagpt/actions/di/write_analysis_code.py of the component DataInterpreter. The manipulation… |
| CVE-2026-4515 | Baja (2.1) | 0.43% | — | 21 mar 2026 | A vulnerability has been found in Foundation Agents MetaGPT up to 0.8.1. This affects the function code_generate of the file metagpt/ext/aflow/scripts/operator.py. The manipulation leads to code injection. It is… |
| CVE-2026-0761 | Crítica (9.8) | 2.4% | — | 23 ene 2026 | Foundation Agents MetaGPT actionoutput_str_to_mapping Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foundation… |
| CVE-2026-0760 | Crítica (9.8) | 1.3% | — | 23 ene 2026 | Foundation Agents MetaGPT deserialize_message Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of… |
| CVE-2024-23750 | Alta (8.8) | 0.97% | — | 22 ene 2024 | MetaGPT through 0.6.4 allows the QaEngineer role to execute arbitrary code because RunCode.run_script() passes shell metacharacters to subprocess.Popen. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.