{"data":{"id":"53839a27-3444-435f-a14d-30a27cde2900","title":"CVE-2026-25904: The Pydantic-AI MCP Run Python tool configures the Deno sandbox with an overly permissive configuration that allows the…","summary":"CVE-2026-25904 affects the Pydantic-AI MCP Run Python tool, which configures its Deno sandbox too permissively. Python code run through the tool can reach the host's localhost interface and perform server-side request forgery (CWE-918). The project mcp-run-python is archived and unlikely to receive a fix. NVD published the entry on 02/09/2026, citing JFrog as the source.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-25904","publishedAt":"2026-02-09T14:16:33.850Z","cveId":"CVE-2026-25904","cweIds":["CWE-918"],"cvssScore":"5.8","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["mcp-run-python@<= 0.0.22"],"affectedPackageNames":["mcp-run-python"],"affectedPackageRefs":["pypi:mcp-run-python"],"affectedVendors":[],"affectedVendorsRaw":["Pydantic-AI","mcp-run-python","Deno"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Pydantic-AI MCP Run Python tool SSRF via Deno sandbox localhost access","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00192,"epssCheckedAt":"2026-11-04T06:10:14.827Z","kevDateAdded":null,"advisoryAliases":["GHSA-6fgp-m6q4-j3q5"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:50:57.012Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-664"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[]}}