Log in Start free

Vulnerability · Published Feb 6, 2026 · Assigned by GitHub_M

CVE-2026-25580Pydantic AI Affected by Server-Side Request Forgery (SSRF) in URL Download Handling

High 8.6

In plain English

A high-severity server-side request forgery in pydantic-ai from pydantic. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 51% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.6High
Exploit odds (30 days)0.6%top 48.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.0.26 to before 1.56.0, aServer-Side Request Forgery (SSRF) vulnerability exists in Pydantic AI's URL download functionality. When applications accept message history from untrusted sources, attackers can include malicious URLs that cause the server to make HTTP requests to internal network resources, potentially accessing internal services or cloud credentials. This vulnerability only affects applications that accept message history from external users. This vulnerability is fixed in 1.56.0.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
PyPIpydantic-ai1.56.0GHSA-2jrp-274c-jhv3
PyPIpydantic-ai1.56.0PYSEC-2026-2976
PyPIpydantic-ai-slim1.56.0GHSA-2jrp-274c-jhv3
PyPIpydantic-ai-slim1.56.0PYSEC-2026-2980

Affected products (as reported)

VendorProductVersions
pydantic pydantic-ai >= 0.0.26, < 1.56.0

Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References