Vulnerability · Published Apr 12, 2026 · Assigned by VulDB
CVE-2026-6111FoundationAgents MetaGPT common.py decode_image server-side request forgery
Medium 6.3
In plain English
A medium-severity server-side request forgery in MetaGPT from FoundationAgents. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Official description
A security flaw has been discovered in FoundationAgents MetaGPT up to 0.8.1. This impacts the function decode_image of the file metagpt/utils/common.py. The manipulation of the argument img_url_or_b64 results in server-side request forgery. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | metagpt | no fix listed | GHSA-r5v8-c28h-f8r8 |
| PyPI | metagpt | no fix listed | PYSEC-2026-2642 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| FoundationAgents | MetaGPT | 0.8.00.8.1 |
Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
References
- VDB-356971 | FoundationAgents MetaGPT common.py decode_image server-side request forgery vdb-entry, technical-description
- VDB-356971 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- Submit #791762 | FoundationAgents MetaGPT 0.8.1 Server-Side Request Forgery (CWE-918) third-party-advisory
- https://github.com/FoundationAgents/MetaGPT/issues/1934 exploit, issue-tracking
- https://github.com/FoundationAgents/MetaGPT/pull/1941 issue-tracking, patch
- https://github.com/FoundationAgents/MetaGPT/ product