Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A vulnerability has been found in Foundation Agents MetaGPT up to 0.8.1. This affects the function code_generate of the file metagpt/ext/aflow/scripts/operator.py. The manipulation leads to code injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-21 | 1 | Exploit1 |
| 2026-03-22 | 1 | Disclosure1 |
CVE-2026-4515 A vulnerability has been found in Foundation Agents MetaGPT up to 0.8.1. This affects the function code_generate of the file metagpt/ext/aflow/scripts/operator.py. The … https://www.cve.org/CVERecord?id=CVE-2026-4515
Post summary
A new CVE (CVE‑2026‑4515) affecting MetaGPT’s code_generate function in a specific file has been announced, with no PoC, exploit, patch or active exploitation details provided.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-4515 - Foundation Agents MetaGPT http://operator.py code_generate code injection Intel Report: https://ift.tt/jqhnLeg
Post summary
A threat alert warns that CVE-2026-4515 enables code injection in Foundation Agents MetaGPT, referencing a code file but offering no patch or evidence of current exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | deepwisdom | metagpt | - | - | - |