https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T18:06:10.036330+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-323807 EUVD-2026-323807 2026-10-10T18:06:10.038935+00:00 EUVD-2026-323807 https://cve.radiocsirt.org/vuln/fkie_cve-2026-10566 fkie_cve-2026-10566 2026-10-10T18:06:10.038966+00:00

A weakness has been identified in FoundationAgents MetaGPT up to 0.8.2. This affects the function Message.check_instruct_content of the file metagpt/schema.py. Executing a manipulation of the argument mapping can lead to deserialization. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

 https://cve.radiocsirt.org/vuln/ghsa-3c3g-7hwg-9qmr GHSA-3c3g-7hwg-9qmr — FoundationAgents MetaGPT: Deserialization through flawed argument mapping via Message.check_instruct_content() 2026-10-10T18:06:10.038997+00:00

Affected: PyPI: metagpt

A weakness has been identified in FoundationAgents MetaGPT up to 0.8.2. This affects the function Message.check_instruct_content of the file metagpt/schema.py. Executing a manipulation of the argument mapping can lead to deserialization. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

 https://cve.radiocsirt.org/vuln/pysec-2026-2637 PYSEC-2026-2637 — FoundationAgents MetaGPT: Deserialization through flawed argument mapping via Message.check_instruct_content() 2026-10-10T18:06:10.039051+00:00

Affected: PyPI: metagpt

A weakness has been identified in FoundationAgents MetaGPT up to 0.8.2. This affects the function Message.check_instruct_content of the file metagpt/schema.py. Executing a manipulation of the argument mapping can lead to deserialization. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.