{"data":{"id":"3500036a-ab44-4b8f-9a31-21c6c1f123ea","title":"CVE-2026-25580: Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.0.26 to…","summary":"Pydantic AI, a Python agent framework for Generative AI applications, contains a Server-Side Request Forgery (SSRF) flaw in its URL download functionality in versions from 0.0.26 to before 1.56.0. When applications accept message history from untrusted sources, attackers can include malicious URLs that make the server send HTTP requests to internal network resources, potentially reaching internal services or cloud credentials. Only applications that accept message history from external users are affected.","solution":"This vulnerability is fixed in 1.56.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-25580","publishedAt":"2026-02-06T21:16:17.167Z","cveId":"CVE-2026-25580","cweIds":["CWE-918"],"cvssScore":"8.6","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["pydantic-ai@>= 0.0.26, < 1.56.0 (fixed: 1.56.0)","pydantic-ai-slim@>= 0.0.26, < 1.56.0 (fixed: 1.56.0)"],"affectedPackageNames":["pydantic-ai","pydantic-ai-slim"],"affectedPackageRefs":["pypi:pydantic-ai","pypi:pydantic-ai-slim"],"affectedVendors":[],"affectedVendorsRaw":["Pydantic AI"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Pydantic AI server-side request forgery in URL download via message history","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00649,"epssCheckedAt":"2026-11-05T00:11:43.744Z","kevDateAdded":null,"advisoryAliases":["GHSA-2jrp-274c-jhv3"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:50:59.550Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2026-02-06T01:13:11.755Z","daysToFix":0,"fixCheckedAt":"2026-10-29T21:41:44.631Z","capecIds":["CAPEC-664"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.93,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"pydantic-ai","fixedVersion":"1.56.0","matchedVersion":"1.56.0","fixReleasedAt":"2026-02-06T01:13:11.755Z","daysToFix":0,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:41:44.482Z"},{"ecosystem":"pypi","name":"pydantic-ai-slim","fixedVersion":"1.56.0","matchedVersion":"1.56.0","fixReleasedAt":"2026-02-06T01:13:14.918Z","daysToFix":0,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:41:44.482Z"}]}}