CVE-2026-107294

Published 8 October 2026 · tracked since 9 October 2026

Description

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.2 and 2.24.0, web_fetch_tool, the WebFetch local fallback, and remote FileUrl media downloads buffer the complete HTTP response body before enforcing content-size controls. An

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-107295 HIGH 7.6
• CVE-2026-107296 LOW 3.7
• CVE-2026-107297 MEDIUM 5.9
• CVE-2026-107290 MEDIUM 6.5
• CVE-2026-107291
• CVE-2026-107292 MEDIUM 6.4
• CVE-2026-107293
• CVE-2026-105436 HIGH 8.8
• CVE-2026-104077 HIGH 7.8
• CVE-2026-107288 LOW 3.7

→ Open the live CVE board · all tools