CVE-2026-107293Low· 2.3▾ SunlitPydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.3.4 until 1.107.4 and 2.27.1, OpenTelemetry instrumentation configured with InstrumentationSettings(include_content=False) can exp…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 12.6 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.3.4 until 1.107.4 and 2.27.1, OpenTelemetry instrumentation configured with InstrumentationSettings(include_content=False) can export retry prompts outside tool calls in gen_ai.input.messages and pydantic_ai.all_messages. Agents using NativeOutput, PromptedOutput, or output validators on text output can therefore disclose validation feedback, including invalid model values quoted by that feedback, to readers of the telemetry backend. Tool-call retries and deployments that do not use include_content=False are not affected by this specific path. This issue is fixed in versions 1.107.4 and 2.27.1.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Affected packages:
pydantic-ai >= 0.3.4, < 1.107.4pydantic-ai >= 2.0.0b1, < 2.27.1pydantic-ai-slim >= 0.3.4, < 1.107.4pydantic-ai-slim >= 2.0.0b1, < 2.27.1Patched in:
pydantic-ai 1.107.4pydantic-ai 2.27.1pydantic-ai-slim 1.107.4pydantic-ai-slim 2.27.1Connected by shared product, vendor, weakness, or advisory.
CVE-2026-107291Low· 2.3Pydantic AI is a Python agent framework for building applications and workflows with Generative AI
CVE-2026-107295High· 7.6Pydantic AI is a Python agent framework for building applications and workflows with Generative AI
CVE-2026-107294Medium· 6.5Pydantic AI is a Python agent framework for building applications and workflows with Generative AI
CVE-2026-107292Medium· 6.4Pydantic AI is a Python agent framework for building applications and workflows with Generative AI
CVE-2026-107290Medium· 6.5Pydantic AI is a Python agent framework for building applications and workflows with Generative AI
CVE-2026-107287Medium· 6.5Pydantic AI is a Python agent framework for building applications and workflows with Generative AI