CVE-2026-4516: Foundation Agents MetaGPT DataInterpreter write_analysis_code.py injection
A vulnerability was found in Foundation Agents MetaGPT up to 0.8.1. This vulnerability affects unknown code of the file metagpt/actions/di/writeanalysiscode.py of the component DataInterpreter. The manipulation results in injection. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-4516?
The severity of CVE-2026-4516 is classified as high due to the potential for remote code execution.
How do I fix CVE-2026-4516?
To fix CVE-2026-4516, upgrade to Foundation Agents MetaGPT version 0.8.2 or later.
What impact does CVE-2026-4516 have on my system?
CVE-2026-4516 allows an attacker to inject malicious code through the DataInterpreter component, potentially compromising system security.
What are the affected products for CVE-2026-4516?
The affected product for CVE-2026-4516 is Foundation Agents MetaGPT, specifically versions up to 0.8.1.
Is there a workaround for CVE-2026-4516?
There is no official workaround for CVE-2026-4516; the only mitigation is to upgrade to the fixed version.