CVE-2026-107294
- Source
- https://cve.org/CVERecord?id=CVE-2026-107294
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-107294.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-107294
- Aliases
- Downstream
- Published
- 2026-10-08T16:59:25Z
- Modified
- 2026-10-28T02:30:30Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- Pydantic AI: Unbounded memory use when downloading remote content via web_fetch or FileUrl
- Details
-
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.2 and 2.24.0, web_fetch_tool, the WebFetch local fallback, and remote FileUrl media downloads buffer the complete HTTP response body before enforcing content-size controls. An attacker-influenced URL can stream an arbitrarily large response that exhausts process memory and crashes the worker; affected media types include ImageUrl, DocumentUrl, VideoUrl, and AudioUrl. SSRF protections remain effective, and the impact is limited to availability. This issue is fixed in versions 1.107.2 and 2.24.0.
- Database specific
{ "cna_assigner": "GitHub_M", "cwe_ids": [ "CWE-400" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/107xxx/CVE-2026-107294.json" }- References
-
- https://github.com/pydantic/pydantic-ai/releases/tag/v1.107.2
- https://github.com/pydantic/pydantic-ai/releases/tag/v2.24.0
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/107xxx/CVE-2026-107294.json
- https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-v2xh-2vp8-57h8
- https://nvd.nist.gov/vuln/detail/CVE-2026-107294
- https://github.com/pydantic/pydantic-ai/commit/7a64d049c3f5271a975cd1d64b2fa876d83ede1d
- https://github.com/pydantic/pydantic-ai/commit/e3824a58c82864ed26afb2887619834a4eb86cc8
- https://github.com/pydantic/pydantic-ai/pull/7141
- https://github.com/pydantic/pydantic-ai/pull/7308
Affected packages
Git / github.com/pydantic/pydantic-ai
Affected ranges
- Type
- GIT
- Repo
- https://github.com/pydantic/pydantic-ai
- Events
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:pydantic:pydantic_ai:*:*:*:*:*:python:*:*", "range": [ { "introduced": "1.77.0" }, { "fixed": "1.107.2" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:pydantic:pydantic_ai:*:-:*:*:*:python:*:*", "range": [ { "introduced": "2.0.0" }, { "fixed": "2.24.0" } ], "source": "CPE_RANGE" }, { "range": [ { "fixed": "7a64d049c3f5271a975cd1d64b2fa876d83ede1d" } ], "source": "REFERENCES_COMMIT" }, { "range": [ { "fixed": "e3824a58c82864ed26afb2887619834a4eb86cc8" } ], "source": "REFERENCES_COMMIT" }, { "original_tag": "v1.107.2", "range": [ { "fixed": "e3824a58c82864ed26afb2887619834a4eb86cc8" } ], "source": "REFERENCES_TAG" }, { "original_tag": "v2.24.0", "range": [ { "fixed": "7a64d049c3f5271a975cd1d64b2fa876d83ede1d" } ], "source": "REFERENCES_TAG" } ] }
Affected versions
v1.*
v1.100.0
v1.101.0
v1.102.0
v1.103.0
v1.104.0
v1.105.0
v1.106.0
v1.107.0
v1.107.1
v1.77.0
v1.78.0
v1.79.0
v1.80.0
v1.81.0
v1.82.0
v1.83.0
v1.84.0
v1.84.1
v1.85.0
v1.85.1
v1.86.0
v1.86.1
v1.87.0
v1.88.0
v1.89.0
v1.89.1
v1.90.0
v1.91.0
v1.92.0
v1.93.0
v1.94.0
v1.95.0
v1.95.1
v1.96.0
v1.96.1
v1.97.0
v1.98.0
v1.99.0
v2.*
v2.0.0
v2.1.0
v2.10.0
v2.11.0
v2.12.0
v2.13.0
v2.14.0
v2.14.1
v2.15.0
v2.16.0
v2.17.0
v2.18.0
v2.19.0
v2.2.0
v2.20.0
v2.21.0
v2.22.0
v2.23.0
v2.3.0
v2.4.0
v2.5.0
v2.5.1
v2.6.0
v2.7.0
v2.8.0
v2.9.0
v2.9.1