deepwisdom records

13 published records for vendor deepwisdom.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 8
With a fix record: 15.4%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

13 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2026-0761No exploit	Foundation Agents MetaGPT actionoutput_str_to_mapping Code Injection Remote Code Execution Vulnerabilitydeepwisdom · metagpt · CWE-94 pre-auth RCE	Critical9.8	—	2.4%	Jan 23, 2026
39Monitor	CVE-2026-0760No exploit	Foundation Agents MetaGPT deserialize_message Deserialization of Untrusted Data Remote Code Execution Vulnerabilitydeepwisdom · metagpt · CWE-502 pre-auth RCE Deserialization	Critical9.8	—	1.3%	Jan 23, 2026
35Monitor	CVE-2024-23750No exploit	MetaGPT through 0.6.4 allows the QaEngineer role to execute arbitrary code because RunCode.run_script() passes shell metacharacters to subprdeepwisdom · metagpt · CWE-94 RCE	High8.8	—	1.0%	Jan 21, 2024
28Monitor	CVE-2026-5974No exploit	FoundationAgents MetaGPT terminal.py Bash.run os command injectiondeepwisdom · metagpt · CWE-77 pre-auth RCE Command injection	Medium6.9	—	3.5%	Apr 9, 2026
23Monitor	CVE-2026-5972No exploit	FoundationAgents MetaGPT terminal.py Terminal.run_command os command injectiondeepwisdom · metagpt · CWE-77 pre-auth RCE Command injection	Medium5.5	—	3.5%	Apr 9, 2026
23Monitor	CVE-2026-5973No exploit	FoundationAgents MetaGPT common.py get_mime_type os command injectiondeepwisdom · metagpt · CWE-77 pre-auth RCE Command injection	Medium5.5	—	3.5%	Apr 9, 2026
22Monitor	CVE-2026-5971No exploit	FoundationAgents MetaGPT XML action_node.py ActionNode.xml_fill eval injectiondeepwisdom · metagpt · CWE-94 pre-auth RCE	Medium5.5	—	0.7%	Apr 9, 2026
22Monitor	CVE-2026-5970No exploit	FoundationAgents MetaGPT HumanEvalBenchmark/MBPPBenchmark check_solution code injectiondeepwisdom · metagpt · CWE-74 pre-auth RCE	Medium5.5	—	0.7%	Apr 9, 2026
22Monitor	CVE-2026-6110No exploit	FoundationAgents MetaGPT Tree-of-Thought Solver tot.py generate_thoughts code injectiondeepwisdom · metagpt · CWE-74 pre-auth RCE	Medium5.5	—	0.7%	Apr 11, 2026
8Monitor	CVE-2026-4515No exploit	Foundation Agents MetaGPT operator.py code_generate code injectiondeepwisdom · metagpt · CWE-74 RCE	Low2.1	—	0.4%	Mar 21, 2026
8Monitor	CVE-2026-4516No exploit	Foundation Agents MetaGPT DataInterpreter write_analysis_code.py injectiondeepwisdom · metagpt · CWE-74	Low2.1	—	0.4%	Mar 21, 2026
8Monitor	CVE-2026-6111Proof of concept	FoundationAgents MetaGPT common.py decode_image server-side request forgerydeepwisdom · metagpt · CWE-918 SSRF	Low2.1	—	0.4%	Apr 11, 2026
8Monitor	CVE-2026-6109No exploit	FoundationAgents MetaGPT Mineflayer HTTP API index.js evaluateCode cross-site request forgerydeepwisdom · metagpt · CWE-352 Pre-auth CSRF	Low2.1	—	0.3%	Apr 11, 2026

CVE-2026-0761
40Plan
Foundation Agents MetaGPT actionoutput_str_to_mapping Code Injection Remote Code Execution Vulnerability
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
deepwisdom · metagptJan 23, 2026
CVE-2026-0760
39Monitor
Foundation Agents MetaGPT deserialize_message Deserialization of Untrusted Data Remote Code Execution Vulnerability
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Deserialization
deepwisdom · metagptJan 23, 2026
CVE-2024-23750
35Monitor
MetaGPT through 0.6.4 allows the QaEngineer role to execute arbitrary code because RunCode.run_script() passes shell metacharacters to subpr
HighCVSS 8.8No exploitEPSS 1%
- RCE
deepwisdom · metagptJan 21, 2024
CVE-2026-5974
28Monitor
FoundationAgents MetaGPT terminal.py Bash.run os command injection
MediumCVSS 6.9No exploitEPSS 3%
- pre-auth RCE
- Command injection
deepwisdom · metagptApr 9, 2026
CVE-2026-5972
23Monitor
FoundationAgents MetaGPT terminal.py Terminal.run_command os command injection
MediumCVSS 5.5No exploitEPSS 3%
- pre-auth RCE
- Command injection
deepwisdom · metagptApr 9, 2026
CVE-2026-5973
23Monitor
FoundationAgents MetaGPT common.py get_mime_type os command injection
MediumCVSS 5.5No exploitEPSS 3%
- pre-auth RCE
- Command injection
deepwisdom · metagptApr 9, 2026
CVE-2026-5971
22Monitor
FoundationAgents MetaGPT XML action_node.py ActionNode.xml_fill eval injection
MediumCVSS 5.5No exploitEPSS 1%
- pre-auth RCE
deepwisdom · metagptApr 9, 2026
CVE-2026-5970
22Monitor
FoundationAgents MetaGPT HumanEvalBenchmark/MBPPBenchmark check_solution code injection
MediumCVSS 5.5No exploitEPSS 1%
- pre-auth RCE
deepwisdom · metagptApr 9, 2026
CVE-2026-6110
22Monitor
FoundationAgents MetaGPT Tree-of-Thought Solver tot.py generate_thoughts code injection
MediumCVSS 5.5No exploitEPSS 1%
- pre-auth RCE
deepwisdom · metagptApr 11, 2026
CVE-2026-4515
8Monitor
Foundation Agents MetaGPT operator.py code_generate code injection
LowCVSS 2.1No exploitEPSS 0%
- RCE
deepwisdom · metagptMar 21, 2026
CVE-2026-4516
8Monitor
Foundation Agents MetaGPT DataInterpreter write_analysis_code.py injection
LowCVSS 2.1No exploitEPSS 0%
deepwisdom · metagptMar 21, 2026
CVE-2026-6111
8Monitor
FoundationAgents MetaGPT common.py decode_image server-side request forgery
LowCVSS 2.1Proof of conceptEPSS 0%
- SSRF
deepwisdom · metagptApr 11, 2026
CVE-2026-6109
8Monitor
FoundationAgents MetaGPT Mineflayer HTTP API index.js evaluateCode cross-site request forgery
LowCVSS 2.1No exploitEPSS 0%
- Pre-auth
- CSRF
deepwisdom · metagptApr 11, 2026