CVE-2026-19059CWE-22path-traversal

CVE-2026-19059

Low · published August 7, 2026

CVSS v3.1
3.3
EPSS
0%
Percentile
10.9
In the wild
Unconfirmed
What it is

A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.2. This affects the function read of the file metagpt/tools/libs/editor.py. This manipulation causes path traversal. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00212 · 10.9th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-08-07T02:16Z
References (6)
https://gist.github.com/tchen200311/cde7fa2213f3df85d19c1928e3c4a509 · [email protected]https://vuldb.com/cve/CVE-2026-19059 · [email protected]https://vuldb.com/submit/864278 · [email protected]https://vuldb.com/vuln/386516 · [email protected]https://vuldb.com/vuln/386516/cti · [email protected]https://vuldb.com/submit/864278 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 06 AUG 16:30Z
    FoundationAgents MetaGPT editor.py read path traversal
    cvelistv5