CVE-2026-25580: CWE-918: Server-Side Request Forgery (SSRF) in pydantic pydantic-ai
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.0.26 to before 1.56.0, aServer-Side Request Forgery (SSRF) vulnerability exists in Pydantic AI's URL download functionality. When applications accept message history from untrusted sources, attackers can include malicious URLs that cause the server to make HTTP requests to internal network resources, potentially accessing internal services or cloud credentials. This vulnerability only affects applications that accept message history from external users. This vulnerability is fixed in 1.56.0.
AI Analysis
Technical Summary
CVE-2026-25580 is a high-severity SSRF vulnerability (CWE-918) in the pydantic-ai Python agent framework. It affects versions >=0.0.26 and <1.56.0. The issue arises in the URL download functionality when applications accept message history from untrusted external users. Attackers can exploit this by including malicious URLs that trigger server-side HTTP requests to internal services or cloud credentials, potentially exposing sensitive internal resources. The vulnerability is resolved in pydantic-ai version 1.56.0.
Potential Impact
Successful exploitation can lead to unauthorized internal network requests from the vulnerable server, potentially exposing internal services or cloud credentials. The vulnerability does not impact confidentiality, integrity, or availability of the server itself directly but can lead to information disclosure within internal networks.
Mitigation Recommendations
Upgrade pydantic-ai to version 1.56.0 or later, where this SSRF vulnerability is fixed. Applications that do not accept message history from untrusted external sources are not affected. No other mitigations are specified in the vendor advisory.
CVE-2026-25580: CWE-918: Server-Side Request Forgery (SSRF) in pydantic pydantic-ai
Description
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.0.26 to before 1.56.0, aServer-Side Request Forgery (SSRF) vulnerability exists in Pydantic AI's URL download functionality. When applications accept message history from untrusted sources, attackers can include malicious URLs that cause the server to make HTTP requests to internal network resources, potentially accessing internal services or cloud credentials. This vulnerability only affects applications that accept message history from external users. This vulnerability is fixed in 1.56.0.
CVSS v3.1
Score 8.6high
Affected software
pydantic
pydantic-ai
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-25580 is a high-severity SSRF vulnerability (CWE-918) in the pydantic-ai Python agent framework. It affects versions >=0.0.26 and <1.56.0. The issue arises in the URL download functionality when applications accept message history from untrusted external users. Attackers can exploit this by including malicious URLs that trigger server-side HTTP requests to internal services or cloud credentials, potentially exposing sensitive internal resources. The vulnerability is resolved in pydantic-ai version 1.56.0.
Potential Impact
Successful exploitation can lead to unauthorized internal network requests from the vulnerable server, potentially exposing internal services or cloud credentials. The vulnerability does not impact confidentiality, integrity, or availability of the server itself directly but can lead to information disclosure within internal networks.
Mitigation Recommendations
Upgrade pydantic-ai to version 1.56.0 or later, where this SSRF vulnerability is fixed. Applications that do not accept message history from untrusted external sources are not affected. No other mitigations are specified in the vendor advisory.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-02-03T01:02:46.715Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/security/cve/CVE-2026-25580","vendor":"Red Hat"}]
Threat ID: 698659ddf9fa50a62f342a24
Added to database: 02/06/2026, 21:15:09 UTC
Last enriched: 07/15/2026, 08:40:02 UTC
Last updated: 09/10/2026, 22:13:34 UTC
Views: 856
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.