CVE-2026-19058: Foundationagents Metagpt

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability was found in FoundationAgents MetaGPT up to 0.8.2. The impacted element is the function DataInterpreter of the file metagpt/roles/di/data_interpreter.py. The manipulation results in code injection. The attack must be initiated from a local position. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

• Foundationagents Metagpt: version 0.8.0 only; version 0.8.1 only; version 0.8.2 only

Published 2026-08-06. Last modified 2026-08-12.