CVE-2026-46678

Pydantic AI is a Python agent framework for building Generative AI applications. In versions 1.56.0 through 1.98.0, when an application opts a URL into forcedownload='allow-local' disabling the default block on private/internal IPs, the cloud-metadata blocklist could be bypassed by encoding the...

pydantic-ai: SSRF blocklist bypass via IPv4-compatible, SIIT/IVI, and local NAT64 IPv6 addresses (incomplete fix of CVE-2026-46678)

SummaryWhen an application using Pydantic AI opts a URL into forcedownload='allow-local' which disables the default block on private/internal IPs and runs on a network that routes the affected IPv6 transition forms NAT64- or ISATAP-configured networks, the cloud-metadata blocklist could be bypass...

ara-cli (>=0.1.14.13, <=0.1.14.14), clai (>=1.56.0, <=1.98.0) +22 more potentially affected by CVE-2026-46678 via pydantic-ai (>=1.56.0, <=1.98.0)

pydantic-ai PYPI version =1.56.0, =0.1.14.13, =1.56.0, =1.0.0, =0.1.102, =0.1.0, =0.1.71, =0.0.1, =0.0.1, =26.1.0rc1, =0.9.1, =0.1.0rc6, =1.2.0, =1.4.0 - peven 0.2.3 and more Source cves: CVE-2026-46678 Source advisory: OSV:PYSEC-2026-2978...

ara-cli (>=0.1.14.13, <=0.1.14.14), clai (>=1.56.0, <=1.98.0) +44 more potentially affected by CVE-2026-46678 via pydantic-ai-slim (>=1.56.0, <=1.98.0)

pydantic-ai-slim PYPI version =1.56.0, =0.1.14.13, =1.56.0, =0.0.400, =1.0.0, =1.0.3, =0.1.102, =0.1.0, =0.1.1, =0.1.0, =0.1.71, =0.0.1, =0.0.1, =26.1.0rc1, =26.1.0 and more Source cves: CVE-2026-46678 Source advisory: OSV:PYSEC-2026-2982...

CVE-2026-46678

creationtimestamp| type| source ---|---|--- 2026-06-17 00:18:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mogzzvej3z22...

ara-cli (>=0.1.14.13, <=0.1.14.14), clai (>=1.56.0, <=1.98.0) +44 more potentially affected by CVE-2026-25580 +1 more via pydantic-ai-slim (>=1.56.0, <=1.98.0)

pydantic-ai-slim PYPI version =1.56.0, =0.1.14.13, =1.56.0, =0.0.400, =1.0.0, =1.0.3, =0.1.102, =0.1.0, =0.1.1, =0.1.0, =0.1.71, =0.0.1, =0.0.1, =26.1.0rc1, =26.1.0 and more Source cves: CVE-2026-25580, CVE-2026-46678 Source advisory: SNYK:PYTHON-PYDANTICAISLIM-16796278...