PT-2026-7089 · Unknown · Pydantic-Ai Mcp Run

Natan Nehorai · Published 2026-02-09 · Updated 2026-02-09 · CVE-2026-25904

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Medium

Base vector

AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Pydantic-AI MCP Run Python tool (affected versions not specified)

Description The Pydantic-AI MCP Run Python tool is configured with an overly permissive Deno sandbox configuration. This allows Python code executed within the sandbox to access the localhost interface of the host system, potentially enabling Server-Side Request Forgery (SSRF) attacks. The project is archived and unlikely to receive a fix. The tool allows the underlying Python code to access the host's localhost interface. This access can be exploited to perform SSRF attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-25904

GHSA-6FGP-M6Q4-J3Q5

Affected Products

Pydantic-Ai Mcp Run

References · 7

• https://osv.dev/vulnerability/GHSA-6fgp-m6q4-j3q5 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-25904 · Security Note
• https://github.com/pydantic/mcp-run-python · Note
• https://t.me/cveNotify/151380 · Telegram Post
• https://research.jfrog.com/vulnerabilities/mcp-run-python-deno-ssrf-jfsa-2026-001653029 · Note
• https://twitter.com/CVEnew/status/2020796008469496085 · Twitter Post
• https://t.me/CVEtracker/44194 · Telegram Post