CVE-2026-25580

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.0.26 to before 1.56.0, aServer-Side Request Forgery (SSRF) vulnerability exists in Pydantic AI's URL download functionality. When applications accept message history from untrusted sources, attackers can include malicious URLs that cause the server to make HTTP requests to internal network resources, potentially accessing internal services or cloud credentials. This vulnerability only affects applications that accept message history from external users. This vulnerability is fixed in 1.56.0.

• CWE-918
• CWE-918

• https://github.com/pydantic/pydantic-ai/commit/d398bc9d39aecca6530fa7486a410d5cce936301Patch
• https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-2jrp-274c-jhv3Exploit, Mitigation, Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2026-25580
• https://bugzilla.redhat.com/show_bug.cgi?id=2437781
• https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25580.json

Published

Feb 6, 2026

Last Modified

Jul 15, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-25575NavigaTUM is a website and API to search for rooms, building…7.5
• CVE-2026-25576ImageMagick is free and open-source software used for editin…5.5
• CVE-2026-25577Emmett is a framework designed to simplify your development …7.5
• CVE-2026-25578Navidrome is an open source web-based music collection serve…6.1
• CVE-2026-25579Navidrome is an open source web-based music collection serve…6.5
• CVE-2026-2558A flaw has been found in GeekAI up to 4.2.4. The affected el…6.3
• CVE-2026-25581SCEditor is a lightweight WYSIWYG BBCode and XHTML editor. P…5.4
• CVE-2026-25582iccDEV provides a set of libraries and tools that allow for …7.8
• CVE-2026-25583iccDEV provides a set of libraries and tools that allow for …7.8
• CVE-2026-25584iccDEV provides a set of libraries and tools that allow for …7.8
• CVE-2026-25585iccDEV provides a set of libraries and tools that allow for …7.8
• CVE-2026-25586SandboxJS is a JavaScript sandboxing library. Prior to 0.8.2…10