CVE-2026-25904
Last modified
CVE-2026-25904 is a medium-severity vulnerability rated 5.8/10 on the CVSS scale. The Pydantic-AI MCP Run Python tool configures the Deno sandbox with an overly permissive configuration that allows the underlying Python code to access the localhost interface of the host to perform SSRF attacks. Note - the "mcp-run-python" project is archived and unlikely to receive a fix.. EPSS estimates a 0.17% chance of exploitation in the next 30 days.
Description
The Pydantic-AI MCP Run Python tool configures the Deno sandbox with an overly permissive configuration that allows the underlying Python code to access the localhost interface of the host to perform SSRF attacks. Note - the "mcp-run-python" project is archived and unlikely to receive a fix.
Metrics
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-25904?
How severe is CVE-2026-25904?
How do I fix CVE-2026-25904?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-25898ImageMagick is free and open-source software used for editin…9.1
- CVE-2026-25899Fiber is an Express inspired web framework written in Go. In…7.5
- CVE-2026-2590Improper enforcement of the Disable password saving in vaul…9.8
- CVE-2026-25900Lack of output escaping leads to a XSS vector in the feed mo…6.1
- CVE-2026-25901Lack of output escaping leads to a XSS vector in the multili…6.1
- CVE-2026-25903Apache NiFi 1.1.0 through 2.7.2 are missing authorization wh…6.6
- CVE-2026-25905The Python code being run by 'runPython' or 'runPythonAsync'…5.8
- CVE-2026-25906Dell Optimizer, versions prior to 6.3.1, contain an Improper…7.8
- CVE-2026-25907Dell PowerScale OneFS, version 9.13.0.0, contains an overly …7.5
- CVE-2026-25908Dell Alienware Command Center (AWCC), versions prior to 6.13…7.8
- CVE-2026-25916Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13, when …4.3
- CVE-2026-25917Dag Authors, who normally should not be able to execute code…7.2
Are you affected by CVE-2026-25904?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST