Home

Description

The Pydantic-AI MCP Run Python tool configures the Deno sandbox with an overly permissive configuration that allows the underlying Python code to access the localhost interface of the host to perform SSRF attacks. Note - the "mcp-run-python" project is archived and unlikely to receive a fix.

PUBLISHED Reserved 2026-02-08 | Published 2026-02-09 | Updated 2026-02-09 | Assigner JFROG




MEDIUM: 5.8CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L

Problem types

CWE-918 Server-Side Request Forgery (SSRF)

Product status

Any version
affected

References

research.jfrog.com/...-python-deno-ssrf-jfsa-2026-001653029/

cve.org (CVE-2026-25904)

nvd.nist.gov (CVE-2026-25904)

Download JSON