CVE-2026-19060

MediumCVSS 5.3/10Last modified Oct 23, 2026

Description

A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.2. This impacts an unknown function. Such manipulation leads to code injection. The attack needs to be performed locally. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-74 CWE-94

Affected software

No affected versions have been published.

Timeline

Published: Aug 6, 2026
Last modified: Oct 23, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-190613.7A flaw has been found in Insta InstaKNXServiceApp 1.2.3.1469. Affected by this issue is the function CreateWebClientAndDownloadFileList of t CVE-2026-190627.3A vulnerability has been found in chiuwingyan house up to dea6bcceaebe2b364a5a209747f48ecc2b2dc670. This affects an unknown part of the file CVE-2026-190644.3A vulnerability was found in SourceCodester Online Examination & Learning Management System 1.0. This vulnerability affects unknown code of CVE-2026-190656.3A vulnerability was determined in SourceCodester Online Examination & Learning Management System 1.0. This issue affects some unknown proces CVE-2026-190664.3A vulnerability was identified in SourceCodester Online Examination & Learning Management System 1.0. Impacted is an unknown function of the CVE-2026-190676.3A security flaw has been discovered in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the file CVE-2026-190686.3A weakness has been identified in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /trea CVE-2026-190696.3A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /tre CVE-2026-19077.5A SQL Injection (SQLi) affects the Kong Gateway (Enterprise and Open Source) clustering communication logic when operating in Hybrid Mode. T CVE-2026-190706.3A vulnerability was detected in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /viewadmin.php. Th CVE-2026-190716.3A flaw has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewappointment.php. This CVE-2026-190729.9Velociraptor stores the compiled VQL in the hunt object internally to avoid having to recompile the artifacts for each endpoint in the hunt.