Executive brief
MetaGPT has an Injection issue
Affected products
- PyPI metagpt
Junglewise Threat Intelligence
CVE-2026-5970: PYSEC-2026-2640 - MetaGPT has an Injection issue
CVE-2026-5970 · Severity: low · CVSS 3.1 · Published 2026-07-13
Technologies: metagpt (PyPI). Vendors: PyPI.
Related threats
- FoundationAgents MetaGPT unsafe deserialization in Message.check_instruct_content
- FoundationAgents MetaGPT SSRF in decode_image
- FoundationAgents MetaGPT code injection in Tree-of-Thought Solver
- FoundationAgents MetaGPT RCE via CSRF in Mineflayer HTTP API
- FoundationAgents MetaGPT OS command injection in get_mime_type