CVE-2026-25904CWE-918

Overly permissive Deno configuration in mcp-run-python leads to SSRF

Medium · published February 9, 2026

CVSS v3.1
5.8
EPSS
0%
Percentile
12.7
In the wild
Unconfirmed
What it is

The Pydantic-AI MCP Run Python tool configures the Deno sandbox with an overly permissive configuration that allows the underlying Python code to access the localhost interface of the host to perform SSRF attacks. Note - the "mcp-run-python" project is archived and unlikely to receive a fix.

The record
Technical detail
CVSS v3.1
5.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00227 · 12.7th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2026-02-09T08:51Z
EPSS history
Timeline
  • 09 FEB 08:51Z
    Overly permissive Deno configuration in mcp-run-python leads to SSRF
    cvelistv5