Deepwisdom

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-0761 Jan 23, 04:16 CRITICAL Act Now

MetaGPT has a code injection vulnerability in actionoutput_str_to_mapping (EPSS 2.6%) allowing remote attackers to execute arbitrary code through crafted AI agent output processing.

RCE Python Code Injection AI / ML Metagpt +1

NVD

CVSS 3.0

9.8

EPSS

2.6%

CVE-2026-0760 Jan 23, 04:16 CRITICAL Act Now

MetaGPT by Foundation Agents has an insecure deserialization in deserialize_message (EPSS 1.7%) enabling remote code execution through crafted serialized data in AI agent communications.

RCE Deserialization AI / ML Metagpt Deepwisdom

NVD

CVSS 3.0

9.8

EPSS

1.7%

CVE-2024-23750 Jan 22, 01:15 PyPI HIGH POC PATCH This Week

MetaGPT through 0.6.4 allows the QaEngineer role to execute arbitrary code because RunCode.run_script() passes shell metacharacters to subprocess.Popen. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

RCE Code Injection Metagpt Deepwisdom

NVD GitHub

CVSS 3.1

8.8

EPSS

1.0%

CVE-2026-0761

EPSS 3% CVSS 9.8

CRITICAL Act Now

MetaGPT has a code injection vulnerability in actionoutput_str_to_mapping (EPSS 2.6%) allowing remote attackers to execute arbitrary code through crafted AI agent output processing.

RCE Python Code Injection +3

NVD

CVE-2026-0760

EPSS 2% CVSS 9.8

CRITICAL Act Now

MetaGPT by Foundation Agents has an insecure deserialization in deserialize_message (EPSS 1.7%) enabling remote code execution through crafted serialized data in AI agent communications.

RCE Deserialization AI / ML +2

NVD

CVE-2024-23750 PyPI

EPSS 1% CVSS 8.8

HIGH POC PATCH This Week

RCE Code Injection Metagpt +1

NVD GitHub