CVE-2026-25580

High

Description

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.0.26 to before 1.56.0, aServer-Side Request Forgery (SSRF) vulnerability exists in Pydantic AI's URL download functionality. When applications accept message history from untrusted sources, attackers can include malicious URLs that cause the server to make HTTP requests to internal network resources, potentially accessing internal services or cloud credentials. This vulnerability only affects applications that accept message history from external users. This vulnerability is fixed in 1.56.0.

SeverityHigh

CVSS8.6

Exploit probability—

ProductPydantic Ai

PublishedFeb 6, 2026

First seenFeb 6, 2026

Weakness typeCWE-918Server-side request forgery (SSRF)

How to fix

Update

pydantic pydantic_ai1.56.0 or later
pydantic-ai1.56.0 or later
pydantic-ai-slim1.56.0 or later

Affected products

Product	Affected versions	Fixed in
pydantic pydantic_ai	0.0.26 ≤ v < 1.56.0	1.56.0
pydantic-aiPyPI	0.0.26 ≤ v < 1.56.0	1.56.0
pydantic-ai-slimPyPI	0.0.26 ≤ v < 1.56.0	1.56.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.