pydantic

Disclosed vulnerabilities where the NVD names pydantic as an affected vendor, highest CVSS first.

1. HIGH 7.6CVE-2026-107295public PoC2026-10-08

   Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.34.0 until 1.107.4 and 2.28.0, the Agent.to_web() and clai web development chat endpoint has missing request content-type validation. A website visited b…

   pydantic ai

   AI risk analysis on Exploit-DB.ai →

2. HIGH 7.5CVE-2026-107286public PoC2026-10-08

   Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 2.10.0 until 2.53.0, streamed requests made through ConcurrencyLimitedModel or limit_model_concurrency can retain shared concurrency slots because anyio.Ca…

   pydantic ai

   AI risk analysis on Exploit-DB.ai →

3. MEDIUM 6.8CVE-2026-107289public PoC2026-10-08

   Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.56.0 until 1.107.6 and 2.44.0, applications that opt attacker-influenced URLs into local network access through FileUrl with force_download='allow-local'…

   pydantic ai

   AI risk analysis on Exploit-DB.ai →

4. MEDIUM 6.5CVE-2026-107294public PoC2026-10-08

   Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.2 and 2.24.0, web_fetch_tool, the WebFetch local fallback, and remote FileUrl media downloads buffer the complete HTTP response body bef…

   pydantic ai

   AI risk analysis on Exploit-DB.ai →

5. MEDIUM 6.5CVE-2026-107290public PoC2026-10-08

   Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.6 and 2.44.0, the local web_fetch_tool and the WebFetch local fallback process server-controlled responses with quadratic title extracti…

   pydantic ai

   AI risk analysis on Exploit-DB.ai →

6. MEDIUM 6.5CVE-2026-107287public PoC2026-10-08

   Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.7 and 2.52.0, the local web_fetch_tool and the WebFetch local fallback can consume excessive CPU and memory during HTML-to-Markdown conv…

   pydantic ai

   AI risk analysis on Exploit-DB.ai →

7. MEDIUM 6.4CVE-2026-107292public PoC2026-10-08

   Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.34.0 until 2.30.0, the Agent.to_web() and clai web development chat server does not validate the Host header, allowing a website visited by a developer t…

   pydantic ai

   AI risk analysis on Exploit-DB.ai →

8. MEDIUM 5.3CVE-2026-107293public PoC2026-10-08

   Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.3.4 until 1.107.4 and 2.27.1, OpenTelemetry instrumentation configured with InstrumentationSettings(include_content=False) can export retry prompts outsi…

   pydantic ai

   AI risk analysis on Exploit-DB.ai →

9. MEDIUM 4.3CVE-2026-107291public PoC2026-10-08

   Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.3.4 until 1.107.6 and 2.44.0, OpenTelemetry instrumentation configured with InstrumentationSettings(include_content=False) can still export sensitive age…

   pydantic ai

   AI risk analysis on Exploit-DB.ai →

10. LOW 3.7CVE-2026-107288public PoC2026-10-08

    Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.6 and 2.44.0, the local web_fetch_tool and the WebFetch local fallback compare blocked_domains entries with a URL hostname before both v…

    pydantic ai

    AI risk analysis on Exploit-DB.ai →