What is CVE-2026-11455?

CVE-2026-11455 is a medium-severity vulnerability, classified under Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection). CVSS score: 5.0/10. Published 2026-06-07.

How severe is CVE-2026-11455?

Medium severity. CVSS v3 base score is 5.0 out of 10.

CVE-2026-11455

CVE-2026-11455

A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.2. Affected by this issue is the function check_cmd_exists of the file metagpt/utils/common.py. This manipulation of the argument mermaid.path causes command injection. T…

CVSS v3 metric

CVSS v3 base score 5.0 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L.

Weakness classification (CWE)

CWE-74 — Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection)
CWE-77 — Command Injection

References

cna@vuldb.com
cna@vuldb.com
cna@vuldb.com
cna@vuldb.com
cna@vuldb.com
cna@vuldb.com
cna@vuldb.com

Frequently asked questions

What is CVE-2026-11455?: CVE-2026-11455 is a medium-severity vulnerability, classified under Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection). CVSS score: 5.0/10. Published 2026-06-07.
How severe is CVE-2026-11455?: Medium severity. CVSS v3 base score is 5.0 out of 10.