CVE-2026-19059

Name of the Vulnerable Software and Affected Versions FoundationAgents MetaGPT versions prior to 0.8.3

Description A path traversal issue exists in the read() function within the metagpt/tools/libs/editor.py file. This flaw allows a local attacker to access files and directories outside the intended folder by manipulating the input passed to the function.

Recommendations As a temporary workaround, restrict access to the read() function in the metagpt/tools/libs/editor.py file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.