PT-2026-7089 · Unknown · Pydantic-Ai Mcp Run

Natan Nehorai · Publicado 2026-02-09 · Atualizado 2026-02-09 · CVE-2026-25904

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Média

Vetor base

AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Pydantic-AI MCP Run Python tool (affected versions not specified)

Description The Pydantic-AI MCP Run Python tool is configured with an overly permissive Deno sandbox configuration. This allows Python code executed within the sandbox to access the localhost interface of the host system, potentially enabling Server-Side Request Forgery (SSRF) attacks. The project is archived and unlikely to receive a fix. The tool allows the underlying Python code to access the host's localhost interface. This access can be exploited to perform SSRF attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2026-25904

GHSA-6FGP-M6Q4-J3Q5

Produtos afetados

Pydantic-Ai Mcp Run

Referências · 7

• https://github.com/pydantic/mcp-run-python · Nota
• https://osv.dev/vulnerability/GHSA-6fgp-m6q4-j3q5 · Aviso do Fabricante
• https://t.me/cveNotify/151380 · Publicação no Telegram
• https://research.jfrog.com/vulnerabilities/mcp-run-python-deno-ssrf-jfsa-2026-001653029 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-25904 · Nota de Segurança
• https://twitter.com/CVEnew/status/2020796008469496085 · Publicação no Twitter
• https://t.me/CVEtracker/44194 · Publicação no Telegram