CVE-2026-19059
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
A path traversal vulnerability was found in FoundationAgents MetaGPT up to version 0.8.2, affecting the read function in metagpt/tools/libs/editor.py. The attack requires local access. The exploit has been publicly disclosed and may be used. The vendor did not respond to the disclosure.
Risk Assessment
The risk includes unauthorized file read outside the intended directory, potentially leading to exposure of sensitive data or further privilege escalation.
Recommendation
Immediately restrict access to the vulnerable version, apply patches or workarounds, and monitor systems for exploitation attempts.
Original NVD description (English source)
A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.2. This affects the function read of the file metagpt/tools/libs/editor.py. This manipulation causes path traversal. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.