CVE-2026-107294

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-107294
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-107294.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-107294
Aliases
Published
2026-10-08T16:59:25Z
Modified
2026-10-10T02:47:39Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
Pydantic AI: Unbounded memory use when downloading remote content via web_fetch or FileUrl
Details

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.2 and 2.24.0, web_fetch_tool, the WebFetch local fallback, and remote FileUrl media downloads buffer the complete HTTP response body before enforcing content-size controls. An attacker-influenced URL can stream an arbitrarily large response that exhausts process memory and crashes the worker; affected media types include ImageUrl, DocumentUrl, VideoUrl, and AudioUrl. SSRF protections remain effective, and the impact is limited to availability. This issue is fixed in versions 1.107.2 and 2.24.0.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-400"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/107xxx/CVE-2026-107294.json"
}
References

Affected packages

Git / github.com/pydantic/pydantic-ai

Affected ranges

Type
GIT
Repo
https://github.com/pydantic/pydantic-ai
Events
Introduced
a282bcade2c2a75847806bbba9cf511dd0623019
Introduced
6001a4549018ad5509f2c11ed6c38d2385159506
Fixed
e3824a58c82864ed26afb2887619834a4eb86cc8
Fixed
7a64d049c3f5271a975cd1d64b2fa876d83ede1d
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "1.77.0"
        },
        {
            "fixed": "1.107.2"
        },
        {
            "introduced": "2.0.0b1"
        },
        {
            "fixed": "2.24.0"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

v1.*
v1.100.0
v1.101.0
v1.102.0
v1.103.0
v1.104.0
v1.105.0
v1.106.0
v1.107.0
v1.107.1
v1.77.0
v1.78.0
v1.79.0
v1.80.0
v1.81.0
v1.82.0
v1.83.0
v1.84.0
v1.84.1
v1.85.0
v1.85.1
v1.86.0
v1.86.1
v1.87.0
v1.88.0
v1.89.0
v1.89.1
v1.90.0
v1.91.0
v1.92.0
v1.93.0
v1.94.0
v1.95.0
v1.95.1
v1.96.0
v1.96.1
v1.97.0
v1.98.0
v1.99.0
v2.*
v2.0.0
v2.1.0
v2.10.0
v2.11.0
v2.12.0
v2.13.0
v2.14.0
v2.14.1
v2.15.0
v2.16.0
v2.17.0
v2.18.0
v2.19.0
v2.2.0
v2.20.0
v2.21.0
v2.22.0
v2.23.0
v2.3.0
v2.4.0
v2.5.0
v2.5.1
v2.6.0
v2.7.0
v2.8.0
v2.9.0
v2.9.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-107294.json"