Is there a public PoC exploit available for EUVD-2026-21698?

Yes, a public proof-of-concept exploit is available for EUVD-2026-21698. Prioritise patching immediately. EPSS: 0.0%.

Is there a patch available for EUVD-2026-21698?

Yes, a patch is available for EUVD-2026-21698. Update the affected software to the latest version immediately.

Metagpt EUVD-2026-21698

Q: What is the CVSS score of EUVD-2026-21698?

EUVD-2026-21698 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-6111 LOW

Server-Side Request Forgery (SSRF) (CWE-918)

2026-04-12 VulDB

GHSA-r5v8-c28h-f8r8

SSRF Metagpt

2.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.1 LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

PoC Detected

Apr 30, 2026 - 14:49 vuln.today

Public exploit code

Severity Changed

Apr 29, 2026 - 01:11 NVD

MEDIUM LOW

CVSS changed

Apr 29, 2026 - 01:11 NVD

5.3 (MEDIUM) 2.1 (LOW)

CVSS changed

Apr 12, 2026 - 03:22 NVD

6.3 (MEDIUM) 5.3 (MEDIUM)

Analysis Generated

Apr 12, 2026 - 02:49 vuln.today

EUVD ID Assigned

Apr 12, 2026 - 02:45 euvd

EUVD-2026-21698

Analysis Generated

Apr 12, 2026 - 02:45 vuln.today

Patch released

Apr 12, 2026 - 02:45 nvd

Patch available

CVE Published

Apr 12, 2026 - 02:30 nvd

LOW 2.1

DescriptionCVE.org

A security flaw has been discovered in FoundationAgents MetaGPT up to 0.8.1. This impacts the function decode_image of the file metagpt/utils/common.py. The manipulation of the argument img_url_or_b64 results in server-side request forgery. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

AnalysisAI

Server-side request forgery (SSRF) in FoundationAgents MetaGPT up to version 0.8.1 allows authenticated remote attackers to conduct arbitrary requests via manipulation of the img_url_or_b64 parameter in the decode_image function of metagpt/utils/common.py. Publicly available exploit code exists, and a vendor patch has been released. The vulnerability carries a CVSS score of 6.3 with low confidentiality, integrity, and availability impact, but requires low-level authentication to exploit.

Technical ContextAI

The vulnerability exists in the image decoding utility function within MetaGPT, an open-source framework for building multi-agent systems. The decode_image function in metagpt/utils/common.py fails to properly validate or sanitize the img_url_or_b64 input parameter before using it to fetch remote resources. This allows an attacker with authenticated access to supply crafted URLs pointing to internal services, file:// URIs, or other sensitive resources, causing the MetaGPT application server to issue unintended HTTP requests on behalf of the attacker. The root cause is classified under CWE-918 (Server-Side Request Forgery), which encompasses improper input validation on user-controlled URLs used in server-initiated requests. The CPE cpe:2.3:a:foundationagents:metagpt:*:*:*:*:*:*:*:* indicates all versions up to and including 0.8.1 are affected.

RemediationAI

Upgrade FoundationAgents MetaGPT to a version released after the publication of patch PR#1941 (https://github.com/FoundationAgents/MetaGPT/pull/1941), which addresses input validation of the img_url_or_b64 parameter in the decode_image function. The vendor has confirmed patch availability; check the official MetaGPT repository releases page for the first patched version following 0.8.1. As an interim mitigation, restrict network access from the MetaGPT application server to only necessary external endpoints, implement URL allowlisting for image fetching operations if feasible, and limit authenticated user access to image processing features to trusted users only. Review application logs for suspicious img_url_or_b64 parameter values or unexpected outbound requests to internal IP ranges or non-standard ports.