PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-11455 FoundationAgents CVE debrief

A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.2. Affected by this issue is the function check_cmd_exists of the file metagpt/utils/common.py. This manipulation of the argument mermaid.path causes command injection. The attack may be initiated remotely. A high degree of complexity is needed for the attack. The exploitation is known to be difficult.

Vendor
FoundationAgents
Product
MetaGPT
CVSS
LOW 1.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-07
Original CVE updated
2026-07-23
Advisory published
2026-06-07
Advisory updated
2026-07-23

Who should care

Users of FoundationAgents MetaGPT up to 0.8.2

Technical summary

The function check_cmd_exists in the file metagpt/utils/common.py is vulnerable to command injection due to improper handling of the argument mermaid.path.

Defensive priority

LOW

Recommended defensive actions

  • Update to a version of FoundationAgents MetaGPT beyond 0.8.2
  • Restrict access to the affected function check_cmd_exists
  • Implement additional security measures to prevent command injection

Evidence notes

The project was informed of the problem early through an issue report but has not responded yet. The exploit has been publicly disclosed and may be utilized.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-11455 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-11455

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-11455 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-11455

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.