Search results

[Security] Remote Code Execution (RCE) in MetaGPT Benchmark Evaluation via Unsafe <code>exec()</code>

Status: Open.

#1942 In FoundationAgents/MetaGPT;

· YLChen-007 opened on Feb 14, 2026

Non-Blind SSRF with File Write in download_model()

Status: Open.

#1934 In FoundationAgents/MetaGPT;

· YLChen-007 opened on Feb 4, 2026

Remote Code Execution via eval() in Tree-of-Thought Solver

Status: Open.

#1933 In FoundationAgents/MetaGPT;

· YLChen-007 opened on Feb 4, 2026

Unauthenticated RCE via CSRF in Mineflayer HTTP API

Status: Open.

#1932 In FoundationAgents/MetaGPT;

· YLChen-007 opened on Feb 4, 2026

Command Injection via Bash.run() LLM Tool Registration

Status: Open.

#1931 In FoundationAgents/MetaGPT;

· YLChen-007 opened on Feb 4, 2026

Command Injection in get_mime_type() via shell=True

Status: Open.

#1930 In FoundationAgents/MetaGPT;

· YLChen-007 opened on Feb 4, 2026

Command Injection in Terminal.run_command() via Weak Blocklist

Status: Open.

#1929 In FoundationAgents/MetaGPT;

· YLChen-007 opened on Feb 4, 2026

Arbitrary Code Execution in ActionNode via eval() Injection

Status: Open.

#1928 In FoundationAgents/MetaGPT;

· YLChen-007 opened on Feb 4, 2026

Arbitrary Code Execution via Incomplete Blocklist in operator.py

Status: Open.

#1926 In FoundationAgents/MetaGPT;

· YLChen-007 opened on Feb 2, 2026

Integration: Pinchwork marketplace for cross-framework agent task delegation

Status: Open.

#1924 In FoundationAgents/MetaGPT;

· pinchwork opened on Feb 1, 2026

Editor.create_file file create error

Status: Open.

#1920 In FoundationAgents/MetaGPT;

· smallNyx opened on Jan 26, 2026

In the Werewolf game, the host cannot properly handle the voting results.

Status: Open.

#1919 In FoundationAgents/MetaGPT;

· Tongueman-hfut opened on Jan 23, 2026