Which versions of Metagpt are affected by EUVD-2026-14250?

Organizations using Foundation Agents MetaGPT should be aware of moderate risk from CVE-2026-4515, a code injection vulnerability rated CVSS 6.3.

Is there a public PoC exploit available for EUVD-2026-14250?

Yes, a public proof-of-concept exploit is available for EUVD-2026-14250. Prioritise patching immediately. EPSS: 0.0%.

Metagpt EUVD-2026-14250

Q: What is the CVSS score of EUVD-2026-14250?

EUVD-2026-14250 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-4515 LOW

Code Injection (CWE-94)

2026-03-21 VulDB

GHSA-6qq6-2j27-fq65

RCE Code Injection Metagpt

2.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.1 LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

Apr 29, 2026 - 01:11 NVD

MEDIUM LOW

CVSS changed

Apr 29, 2026 - 01:11 NVD

6.3 (MEDIUM) 2.1 (LOW)

PoC Detected

Mar 23, 2026 - 14:31 vuln.today

Public exploit code

EUVD ID Assigned

Mar 21, 2026 - 11:45 euvd

EUVD-2026-14250

Analysis Generated

Mar 21, 2026 - 11:45 vuln.today

CVE Published

Mar 21, 2026 - 11:32 nvd

MEDIUM 6.3

DescriptionCVE.org

A vulnerability has been found in Foundation Agents MetaGPT up to 0.8.1. This affects the function code_generate of the file metagpt/ext/aflow/scripts/operator.py. The manipulation leads to code injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

A code injection vulnerability exists in Foundation Agents MetaGPT versions up to 0.8.1 within the code_generate function of metagpt/ext/aflow/scripts/operator.py, allowing authenticated remote attackers to execute arbitrary code. The vulnerability is classified as CWE-94 (improper control of generation of code) and carries a CVSS score of 6.3 with network-based attack vector requiring low privileges. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Vulnerability AssessmentAI

Risk Assessment	While the CVSS base score of 6.3 is moderate, multiple real-world risk indicators elevate concern: the exploit has been publicly disclosed and is actively available on GitHub, reducing barriers to exploitation; the attack requires only low privileges and low attack complexity with network accessibility, meaning any authenticated user can trigger the vulnerability; and the vendor's failure to respond to disclosure suggests no patch timeline exists. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An authenticated user with access to a MetaGPT deployment submits a specially crafted input to the code_generate function in metagpt/ext/aflow/scripts/operator.py that includes malicious Python code. Due to insufficient input sanitization, this malicious code is incorporated directly into the generated code and executed within the MetaGPT process context, allowing the attacker to exfiltrate sensitive data, modify system state, or pivot to other systems accessible from the MetaGPT host. …
Remediation	Immediately upgrade Foundation Agents MetaGPT to a version newer than 0.8.1; however, verify that a patched release is available from the vendor before upgrading, as the vendor has not publicly confirmed a fix timeline. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 30 days: Identify affected systems running Foundation Agents MetaGPT and apply vendor patches as part of regular patch cycle. …

Threat intelligence, references, and detailed analysis are available after sign-in.

EUVD-2026-14250 vulnerability details – vuln.today

Back