CVE-2026-107294mediumCWE-400

CVE-2026-107294: fallo de gravedad media en pydantic-ai

Pydantic AI: Unbounded memory use when downloading remote content via web_fetch or FileUrl

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear pydantic-ai+ Monitorear pydantic-ai-slim

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6.5epss 0.4%
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.2 and 2.24.0, web_fetch_tool, the WebFetch local fallback, and remote FileUrl media downloads buffer the complete HTTP response body before enforcing content-size controls. An attacker-influenced URL can stream an arbitrarily large response that exhausts process memory and crashes the worker; affected media types include ImageUrl, DocumentUrl, VideoUrl, and AudioUrl. SSRF protections remain effective, and the impact is limited to availability. This issue is fixed in versions 1.107.2 and 2.24.0.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Productos afectados
pydantic · pydantic-aipydantic · pydantic-ai-slim
CVEs relacionadas — pydantic-ai

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-25580HIGHPydantic AI Affected by Server-Side Request Forgery (SSRF) in URL Download HandlingEPSS 0.6%CVE-2026-107291LOWPydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when `include_content=False`EPSS 0.6%CVE-2026-107290MEDIUMPydantic AI: Event loop blocked by quadratic title extraction in `web_fetch`EPSS 0.5%CVE-2026-107286HIGHPydantic AI: Concurrency-limited models can keep their slot when a streamed request ends earlyEPSS 0.4%CVE-2026-48782MEDIUMpydantic-ai: SSRF blocklist bypass via IPv4-compatible, SIIT/IVI, and local NAT64 IPv6 addresses (incomplete fix of CVE-2026-46678)EPSS 0.4%CVE-2026-107289MEDIUMPydantic AI: SSRF cloud-metadata blocklist bypass via IPv6 zone identifier (incomplete fix for CVE-2026-46678 and CVE-2026-48782)EPSS 0.4%