PT-2026-32141 · Foundation Agents · Metagpt

Eric-D · Published 2026-04-12 · Updated 2026-04-12 · CVE-2026-6109

Mitre

CVSS v3.1

4.3

Medium

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1. The impacted element is the function evaluateCode of the file metagpt/environment/minecraft/mineflayer/index.js of the component Mineflayer HTTP API. Executing a manipulation can lead to cross-site request forgery. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

Exploit

Fix

Missing Authorization

CSRF

Weakness Enumeration

CWE-862

CWE-352

Related Identifiers

CVE-2026-6109

Affected Products

Metagpt

References · 6

• 🔥 https://github.com/FoundationAgents/MetaGPT/issues/1932 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-6109 · Security Note
• https://vuldb.com/submit/791759 · Note
• https://vuldb.com/vuln/356969 · Note
• https://github.com/FoundationAgents/MetaGPT · Note
• https://vuldb.com/vuln/356969/cti · Note