SSRF in Pydantic Pydantic-Ai
CVE-2026-25580
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.0.26 to before 1.56.0, aServer-Side Request Forgery (SSRF) vulnerability exists in Pydantic AI's URL download functionality. When applications accept message history from untrusted sources, attackers can include malicious URLs that cause the server to make HTTP requests to internal network resources, potentially accessing internal services or cloud credentials. This vulnerability only affects applications that accept message history from external users. This vulnerability is fixed in 1.56.0.
Vulnerability class: SSRF (Server-Side Request Forgery)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.6 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N.
EPSS exploit prediction
EPSS: 0.007 (50.2th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 50th percentile — 50.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.006 · newest: 0.007 · change: +0.001
Affected products
- Pydantic Pydantic-Ai — versions >= 0.0.26, < 1.56.0
- Pydantic Ai
Weakness classification (CWE)
References
- github.com/pydantic/pydantic-ai/security/advisories/GHSA-2jrp-274c-jhv3 (Exploit, Mitigation, Vendor Advisory)
- github.com/pydantic/pydantic-ai/commit/d398bc9d39aecca6530fa7486a410d5cce936301 (Patch)
- 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
- 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
- 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Frequently asked questions
- What is CVE-2026-25580?
- CVE-2026-25580 is a high-severity vulnerability in Pydantic Pydantic-Ai, classified under Server-Side Request Forgery (SSRF). CVSS score: 8.6/10. Published 2026-02-06.
- How severe is CVE-2026-25580?
- High severity. CVSS v3 base score is 8.6 out of 10.