metalama has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 7.8 (high).

CVEs per month

Last 12 months, by publish date

1225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/101126/11

Exploited share: 0% vs 1% corpus
Median CVSS: 7.8
Publish → KEV: —
Last 90 days: 2 prev 0

Weakness classes

Products

Metalama 2

Follow metalama:RSS feed Save a search →Embed badge ↗

Total CVEs

Critical

CISA KEV

Exploited

Worst active — by depth score

CVE-2026-62847High· 8.2Metalama: Local code execution via DLL planting in world-writable temporary directories (Linux/macOS)45
CVE-2026-62848High· 7.3Metalama's Visual Studio inter-process named pipe allows unsafe deserialization that enables local code execution40

metalama vulnerabilities

CVEs affecting metalama, newest first. Open any entry for full detail, references, and exploit status.

2 CVEsRSS

CVE-2026-62848High· 7.3

1w ago

Metalama's Visual Studio inter-process named pipe allows unsafe deserialization that enables local code execution

Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. From 2023.0.101-rc until 2025.1.18, 2026.0.25 and 2026.1.19, the Windows Visual Studio integration deserializes local named-pipe messages without restrictin…

▾ Twilightmetalama · MetalamaEPSS 0.19%via CVEORG

CVE-2026-62847High· 8.2

1w ago

Metalama: Local code execution via DLL planting in world-writable temporary directories (Linux/macOS)

Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. Prior to 2025.1.18, 2026.0.25 and 2026.1.19, Metalama.Framework and Metalama.Tool load and execute compile-time assemblies, auxiliary executable tools and e…

▾ Twilightmetalama · MetalamaEPSS 0.15%via CVEORG