REDHAT-BUG-2437781: SSRF
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.0.26 to before 1.56.0, aServer-Side Request Forgery (SSRF) vulnerability exists in Pydantic AI's URL download functionality. When applications accept message history from untrusted sources, attackers can include malicious URLs that cause the server to make HTTP requests to internal network resources, potentially accessing internal services or cloud credentials. This vulnerability only affects applications that accept message history from external users. This vulnerability is fixed in 1.56.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
pydantic-aito a version that resolves this vulnerability.Fixed in 1.56.0 - Configuration
Ensure message history provided to the application is not accepted from external/untrusted users, since the SSRF vulnerability only affects applications that accept message history from external users.
Applications using Pydantic AI URL download functionality message history source trust = Untrusted sources not accepted
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2437781?
The severity of REDHAT-BUG-2437781 is classified as high with a severity score of 7.
What type of vulnerability is associated with REDHAT-BUG-2437781?
REDHAT-BUG-2437781 is associated with a Server-Side Request Forgery (SSRF) vulnerability.
How do I fix REDHAT-BUG-2437781?
To fix REDHAT-BUG-2437781, update Pydantic AI to version 1.56.0 or later.
What software is affected by REDHAT-BUG-2437781?
The affected software for REDHAT-BUG-2437781 is Pydantic AI, specifically versions from 0.0.26 to before 1.56.0.
What should I do if my application uses an untrusted source with REDHAT-BUG-2437781?
If your application uses an untrusted source, it is crucial to update Pydantic AI to mitigate the SSRF vulnerability identified in REDHAT-BUG-2437781.