CVE-2026-10566: FoundationAgents MetaGPT schema.py Message.check_instruct_content deserialization
A weakness has been identified in FoundationAgents MetaGPT up to 0.8.2. This affects the function Message.checkinstructcontent of the file metagpt/schema.py. Executing a manipulation of the argument mapping can lead to deserialization. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What is the risk level of CVE-2026-10566?
The risk level of CVE-2026-10566 is rated as medium with a score of 5.3.
What types of attacks are possible with CVE-2026-10566?
CVE-2026-10566 allows for local attacks that can lead to deserialization vulnerabilities due to argument mapping manipulation.
Which software is affected by CVE-2026-10566?
CVE-2026-10566 affects versions of FoundationAgents MetaGPT up to 0.8.2.
What mitigation strategies exist for CVE-2026-10566?
To mitigate CVE-2026-10566, ensure proper input validation and restrict access to the vulnerable function to trusted users only.
How can the impact of CVE-2026-10566 be assessed?
The impact of CVE-2026-10566 can be assessed by examining the potential for unauthorized access or execution of malicious code through local exploitation.