id: PYSEC-2026-2643
published: "2026-07-13T15:02:47.274869Z"
modified: "2026-07-13T16:04:51.323438Z"
aliases:
- CVE-2026-6109
- GHSA-w287-wwhf-95vv
summary: MetaGPT has an eval injection via a cross-site request forgery attack
details: A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.2. The impacted element is the function evaluateCode of the file metagpt/environment/minecraft/mineflayer/index.js of the component Mineflayer HTTP API. Executing a manipulation can lead to cross-site request forgery. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
affected:
- package:
    name: metagpt
    ecosystem: PyPI
    purl: pkg:pypi/metagpt
  ranges:
  - type: ECOSYSTEM
    events:
    - introduced: "0"
    - last_affected: 0.8.2
  versions:
  - "0.1"
  - 0.3.0
  - 0.4.0
  - 0.5.0
  - 0.5.1
  - 0.5.2
  - 0.6.0
  - 0.6.1
  - 0.6.10
  - 0.6.11
  - 0.6.12
  - 0.6.13
  - 0.6.2
  - 0.6.3
  - 0.6.4
  - 0.6.5
  - 0.6.6
  - 0.6.7
  - 0.6.8
  - 0.6.9
  - 0.7.0
  - 0.7.1
  - 0.7.2
  - 0.7.3
  - 0.7.4
  - 0.7.6
  - 0.7.7
  - 0.8.0
  - 0.8.1
  - 0.8.2
references:
- type: ADVISORY
  url: https://nvd.nist.gov/vuln/detail/CVE-2026-6109
- type: WEB
  url: https://github.com/FoundationAgents/MetaGPT/issues/1932
- type: PACKAGE
  url: https://github.com/FoundationAgents/MetaGPT
- type: WEB
  url: https://vuldb.com/submit/791759
- type: WEB
  url: https://vuldb.com/vuln/356969
- type: WEB
  url: https://vuldb.com/vuln/356969/cti
- type: PACKAGE
  url: https://pypi.org/project/metagpt
- type: ADVISORY
  url: https://github.com/advisories/GHSA-w287-wwhf-95vv
severity:
- type: CVSS_V3
  score: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
- type: CVSS_V4
  score: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P