CVE-2026-19058

Received Received - Intake

Code Injection in FoundationAgents MetaGPT

Publication date: 2026-08-06

Last updated on: 2026-08-06

Assigner: VulDB

Description

A vulnerability was found in FoundationAgents MetaGPT up to 0.8.2. The impacted element is the function DataInterpreter of the file metagpt/roles/di/data_interpreter.py. The manipulation results in code injection. The attack must be initiated from a local position. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-06

Last Modified

2026-08-06

Generated

2026-08-07

AI Q&A

2026-08-07

EPSS Evaluated

N/A

NVD

CVE-2026-19058

Affected Vendors & Products

Vendor	Product	Version / Range
foundationagents	metagpt	to 0.8.2 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-94	The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
CWE-74	The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

This vulnerability is a code injection flaw in FoundationAgents MetaGPT up to version 0.8.2. It exists in the DataInterpreter function of the file metagpt/roles/di/data_interpreter.py. An attacker can exploit this by injecting malicious code, but the attack must start from a local position on the affected system.

Detection Guidance

This vulnerability involves code injection in the DataInterpreter function of MetaGPT. Detection requires checking for unauthorized code execution or suspicious activity in the metagpt/roles/di/data_interpreter.py file. Review logs for unexpected script executions or file modifications in the MetaGPT directory.

Impact Analysis

If exploited, this vulnerability could allow an attacker to execute arbitrary code on your system with the privileges of the user running MetaGPT. This could lead to unauthorized access, data theft, or further compromise of the system. The public availability of the exploit increases the risk of real-world attacks.

Mitigation Strategies

Immediately update MetaGPT to the latest version beyond 0.8.2 if available. If no patch exists, restrict local access to the DataInterpreter function, monitor for suspicious activity, and disable the vulnerable component if possible. Remove any exposed instances of MetaGPT from your environment.

Hi! I’m here to help you understand CVE-2026-19058. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70