8.6
Élevée
CVE-2026-25580 Pydantic AI is a Python agent framework for building applications and workflows with Generative AI
Description
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.0.26 to before 1.56.0, aServer-Side Request Forgery (SSRF) vulnerability exists in Pydantic AI's URL download functionality. When applications accept message history from untrusted sources, attackers can include malicious URLs that cause the server to make HTTP requests to internal network resources, potentially accessing internal services or cloud credentials. This vulnerability only affects applications that accept message history from external users. This vulnerability is fixed in 1.56.0.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| pydantic-ai 0.0 | 0.0.26 → < 1.56.0 | 1.56.0 |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | Versions non publiées |
Références
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de pydantic-ai
Les 16 CVE de pydantic-ai →
CVE-2026-107295
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI
7.6
Élevée
CVE-2026-107294
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI
6.5
Moyenne
CVE-2026-107293
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI
2.3
Faible
CVE-2026-107292
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI
6.4
Moyenne