cyfenced.com →

[ CVE-2026-107294 · Published 8 Oct 2026 ]

Pydantic AI: Unbounded memory use when downloading remote content via web_fetch or FileUrl

CVSS 6.5 EPSS <1%Fix available

[ Description ]Official description

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.2 and 2.24.0, web_fetch_tool, the WebFetch local fallback, and remote FileUrl media downloads buffer the complete HTTP response body before enforcing content-size controls. An attacker-influenced URL can stream an arbitrarily large response that exhausts process memory and crashes the worker; affected media types include ImageUrl, DocumentUrl, VideoUrl, and AudioUrl. SSRF protections remain effective, and the impact is limited to availability. This issue is fixed in versions 1.107.2 and 2.24.0.

[ Fixes ]Fixes and patches

  • pydantic-ai 1.107.2Fixed version · GitHub Advisories · pip package pydantic-ai: upgrade to 1.107.2 or later (affected >= 1.77.0, < 1.107.2)
  • pydantic-ai 2.24.0Fixed version · GitHub Advisories · pip package pydantic-ai: upgrade to 2.24.0 or later (affected >= 2.0.0b1, <= 2.23.0)
  • pydantic-ai-slim 1.107.2Fixed version · GitHub Advisories · pip package pydantic-ai-slim: upgrade to 1.107.2 or later (affected >= 1.77.0, < 1.107.2)
  • pydantic-ai-slim 2.24.0Fixed version · GitHub Advisories · pip package pydantic-ai-slim: upgrade to 2.24.0 or later (affected >= 2.0.0b1, <= 2.23.0)
  • Patch on github.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD
  • Patch on github.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD
  • Patch on github.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD
  • Patch on github.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD

[ Packages ]Affected open-source packages

[ References ]References