CVE-2026-107294mediumCWE-400

CVE-2026-107294: medium-severity vulnerability in pydantic-ai

Pydantic AI: Unbounded memory use when downloading remote content via web_fetch or FileUrl

Published · Updated

Follow this CVE+ Monitor pydantic-ai+ Monitor pydantic-ai-slim

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.4%
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.2 and 2.24.0, web_fetch_tool, the WebFetch local fallback, and remote FileUrl media downloads buffer the complete HTTP response body before enforcing content-size controls. An attacker-influenced URL can stream an arbitrarily large response that exhausts process memory and crashes the worker; affected media types include ImageUrl, DocumentUrl, VideoUrl, and AudioUrl. SSRF protections remain effective, and the impact is limited to availability. This issue is fixed in versions 1.107.2 and 2.24.0.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products
pydantic · pydantic-aipydantic · pydantic-ai-slim
Related CVEs — pydantic-ai

In the same product, most dangerous first.

CVE-2026-25580HIGHPydantic AI Affected by Server-Side Request Forgery (SSRF) in URL Download HandlingEPSS 0.6%CVE-2026-107291LOWPydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when `include_content=False`EPSS 0.6%CVE-2026-107290MEDIUMPydantic AI: Event loop blocked by quadratic title extraction in `web_fetch`EPSS 0.5%CVE-2026-107286HIGHPydantic AI: Concurrency-limited models can keep their slot when a streamed request ends earlyEPSS 0.4%CVE-2026-48782MEDIUMpydantic-ai: SSRF blocklist bypass via IPv4-compatible, SIIT/IVI, and local NAT64 IPv6 addresses (incomplete fix of CVE-2026-46678)EPSS 0.4%CVE-2026-107289MEDIUMPydantic AI: SSRF cloud-metadata blocklist bypass via IPv6 zone identifier (incomplete fix for CVE-2026-46678 and CVE-2026-48782)EPSS 0.4%