CVE-2026-19060

MEDIUM 5.3

FoundationAgents MetaGPT code injection

CVSS Score

5.3

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.2. This impacts an unknown function. Such manipulation leads to code injection. The attack needs to be performed locally. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

CWE	CWE-94 CWE-74
Vendor	foundationagents
Product	metagpt
Published	Aug 6, 2026

Stay Ahead of the Next One

Get instant alerts for foundationagents metagpt

Be the first to know when new medium vulnerabilities affecting foundationagents metagpt are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

FoundationAgents / MetaGPT

0.8.0 0.8.1 0.8.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/386517 vuldb.com: https://vuldb.com/vuln/386517/cti vuldb.com: https://vuldb.com/cve/CVE-2026-19060 vuldb.com: https://vuldb.com/submit/864279 vuldb.com: https://vuldb.com/submit/864282 gist.github.com: https://gist.github.com/tchen200311/fe1acfbaa29652429309c2dad1aa2aed gist.github.com: https://gist.github.com/tchen200311/3a3bff5a9613dd309db93e4c15079fc6

Credits

🔍 tchen200311 (VulDB User) VulDB CNA Team