{"data":{"id":"8dfa2b2b-10ef-47f7-a7bf-d2d09604e047","title":"GHSA-cqp8-fcvh-x7r3: Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv4-mapped IPv6 (Incomplete fix of CVE-2026-25580)","summary":"Pydantic AI versions with an incomplete fix for GHSA-2jrp-274c-jhv3 / CVE-2026-25580 let an attacker bypass the cloud-metadata blocklist by encoding the metadata IP in IPv6 transition forms (IPv4-mapped IPv6, 6to4, or NAT64). This affects applications that set force_download='allow-local' on a URL influenced by untrusted input, and dual-stack or translated networks can route the request to the IPv4 metadata endpoint, exposing cloud IAM short-term credentials.","solution":"Upgrade to 1.99.0 or later. Until then, avoid passing force_download='allow-local' on any URL that untrusted input could influence, or resolve the hostname yourself and validate it, including IPv6-encoded forms, against your own metadata blocklist before constructing the FileUrl.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-cqp8-fcvh-x7r3","publishedAt":"2026-05-21T21:35:18.000Z","cveId":"CVE-2026-46678","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["pydantic-ai-slim@>= 1.56.0, < 1.99.0 (fixed: 1.99.0)","pydantic-ai@>= 1.56.0, < 1.99.0 (fixed: 1.99.0)"],"affectedPackageNames":["pydantic-ai-slim","pydantic-ai"],"affectedPackageRefs":["pypi:pydantic-ai","pypi:pydantic-ai-slim"],"affectedVendors":[],"affectedVendorsRaw":["Pydantic AI"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.0038,"epssCheckedAt":"2026-10-14T12:12:42.415Z","kevDateAdded":null,"advisoryAliases":["GHSA-cqp8-fcvh-x7r3"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-05-21T21:35:18.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null}}