The Pydantic-AI MCP Run Python tool configures the Deno sandbox with an overly permissive configuration that allows the underlying Python code to access the localhost interface of the host to perform SSRF attacks. Note - the "mcp-run-python" project is archived and unlikely to receive a fix.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Mon, 09 Feb 2026 09:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The Pydantic-AI MCP Run Python tool configures the Deno sandbox with an overly permissive configuration that allows the underlying Python code to access the localhost interface of the host to perform SSRF attacks. Note - the "mcp-run-python" project is archived and unlikely to receive a fix. | |
| Title | Overly permissive Deno configuration in mcp-run-python leads to SSRF | |
| Weaknesses | CWE-918 | |
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: JFROG
Published:
Updated: 2026-02-09T08:51:18.196Z
Reserved: 2026-02-08T11:19:42.864Z
Link: CVE-2026-25904
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-02-09T09:16:33.850
Modified: 2026-02-09T09:16:33.850
Link: CVE-2026-25904
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses