CVE-2026-6109 FoundationAgents CVE debrief

Who should care

Defenders responsible for FoundationAgents MetaGPT deployments should assess exposure and prioritize verification of the affected version. Defenders need to verify the affected version and assess exposure to cross-site request forgery attacks. Implementing compensating controls can prevent potential attacks. Monitoring for exploitation attempts is necessary. Security teams and vulnerability management teams should review the supplied official advisory or

Why it matters

CVE-2026-6109 is a cross-site request forgery vulnerability in FoundationAgents MetaGPT up to 0.8.1. Defenders should prioritize verifying the affected version, assessing exposure, and implementing compensating controls.

• Defenders need to verify the affected version and assess exposure to cross-site request forgery attacks
• Implementing compensating controls can prevent potential attacks
• Monitoring for exploitation attempts is necessary

Technical summary

The vulnerability is in the evaluateCode function of the metagpt/environment/minecraft/mineflayer/index.js file in FoundationAgents MetaGPT up to 0.8.1. This function is part of the Mineflayer HTTP API. A manipulation can lead to cross-site request forgery, and the attack may be performed from remote. The vulnerability allows for cross-site request forgery attacks. Defenders should prioritize verifying the affected version and assessing exposure, as the exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

Defensive priority

Defenders should prioritize verifying the affected version and assessing exposure, as the vulnerability allows for cross-site request forgery attacks.

Recommended defensive actions

• Verify the version of FoundationAgents MetaGPT and assess exposure
• Implement compensating controls to prevent cross-site request forgery attacks
• Monitor for potential exploitation attempts
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1, specifically in the evaluateCode function of the metagpt/environment/minecraft/mineflayer/index.js file. The exploit has been publicly disclosed.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.