Skip to content
CVE PROGRAM SOURCE RECORD5.8 Medium

CVE-2026-25904

Overly permissive Deno configuration in mcp-run-python leads to SSRF

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
JFROG

Description

The Pydantic-AI MCP Run Python tool configures the Deno sandbox with an overly permissive configuration that allows the underlying Python code to access the localhost interface of the host to perform SSRF attacks. Note - the "mcp-run-python" project is archived and unlikely to receive a fix.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

mcp-run-python

  • 0affected

References