CVE-2026-25904

—

CVSS 3.1

5.8 medium

EPSS

<1%p7

Published

Feb 9, 2026 (Feb 9, 2026)

Modified

Jun 17, 2026

Description

The Pydantic-AI MCP Run Python tool configures the Deno sandbox with an overly permissive configuration that allows the underlying Python code to access the localhost interface of the host to perform SSRF attacks. Note - the "mcp-run-python" project is archived and unlikely to receive a fix.

Weakness: CWE-918
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.