Skip to content
OpenAdvisories
Medium · 6.3 Public exploit CVE-2026-6111 EUVD-2026-21698GHSA-r5v8-c28h-f8r8PYSEC-2026-2642

FoundationAgents MetaGPT common.py decode_image server-side request forgery

Published Apr 12, 2026 · Updated Apr 13, 2026 · Assigned by VulDB

Vendor: Foundation Agents Product: MetaGPT Package: metagpt Ecosystem: PyPI

Description

A security flaw has been discovered in FoundationAgents MetaGPT up to 0.8.1. This impacts the function decode_image of the file metagpt/utils/common.py. The manipulation of the argument img_url_or_b64 results in server-side request forgery. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Affected products

VendorProductAffectedFixed
FoundationAgents MetaGPT 0.8.0, 0.8.1 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI metagpt <= 0.8.2 — GHSA-r5v8-c28h-f8r8

References