CVE-2026-19059
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
A path traversal vulnerability was found in FoundationAgents MetaGPT up to version 0.8.2, affecting the read function in metagpt/tools/libs/editor.py. The attack requires local access. The exploit has been publicly disclosed and may be used. The vendor did not respond to the disclosure.
Risk Assessment
The risk includes unauthorized file read outside the intended directory, potentially leading to exposure of sensitive data or further privilege escalation.
Recommendation
Immediately restrict access to the vulnerable version, apply patches or workarounds, and monitor systems for exploitation attempts.
Other vulnerabilities in MetaGPT
See all- CVE-2026-79408Critical
MetaGPT version 0.8.1 contains an OS command injection vulnerability. An attacker can execute arbitrary commands via the 'path' argument of RepoParser.rebuild_class_views() in metagpt/repo_parser.py.
- CVE-2026-79407High
A path traversal vulnerability in the SPO extension of MetaGPT 0.8.1 allows an attacker to read arbitrary files via the FILE_NAME value used by set_file_name() and load_meta_data() in metagpt/ext/spo/utils/load.py. The vulnerable code joins the attacker-controlled FILE_NAME value with the settings directory and opens the resulting path without validating that the resolved path remains within the intended directory.
- CVE-2026-19060Medium
A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.2 affecting an unknown function, allowing code injection. The attack requires local access. The exploit is publicly available and might be used. The vendor did not respond.
- CVE-2026-19058Medium
A vulnerability was found in FoundationAgents MetaGPT up to 0.8.2 in the DataInterpreter function of the file metagpt/roles/di/data_interpreter.py, allowing code injection. The attack must be initiated locally. The exploit is public and could be used. The vendor did not respond.
- CVE-2026-11455Medium
A vulnerability has been determined in FoundationAgents MetaGPT up to version 0.8.2, allowing command injection in the check_cmd_exists function of metagpt/utils/common.py. The attack may be initiated remotely but requires high complexity. The exploit is publicly available, and the project has not responded.
- CVE-2026-10566Medium
In MetaGPT up to version 0.8.2, the function Message.check_instruct_content in metagpt/schema.py is vulnerable to deserialization via manipulation of the mapping argument. The attack requires local access.
Original NVD description (English source)
A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.2. This affects the function read of the file metagpt/tools/libs/editor.py. This manipulation causes path traversal. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS