pydantic-ai-harness vulnerabilities

CVEs whose affected-version data names the pydantic-ai-harness package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-114386Medium· 4.8

today

Pydantic AI Harness before 0.59.0 CodeMode Tool Call Limit Bypass via run_code

Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_n…

▾ Sunlitpydantic · pydantic-ai-harnessvia CVEORG