CVE-2026-107291

MEDIUM
Published Oct 8, 2026 Modified Oct 13, 2026 CWE-212 CWE-532

Description

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.3.4 until 1.107.6 and 2.44.0, OpenTelemetry instrumentation configured with InstrumentationSettings(include_content=False) can still export sensitive agent content through exception.message and exception.stacktrace events, error status descriptions, and model_request_parameters containing instructions or the prompted_output_template. The exposed data is available to readers of the configured telemetry backend and can include tool feedback, provider error bodies, runtime instructions, and structured-output templates even though message attributes are redacted. This issue does not grant new access to agent data, and deployments that do not use include_content=False are not affected by the setting bypass. This issue is fixed in versions 1.107.6 and 2.44.0.

Is your site exposed to CVE-2026-107291?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

4.3
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS — Exploit Prediction

0.0062
Probability of exploitation
0.50%
Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

Weakness Type (CWE)

CWE-212 CWE-212
CWE-532 CWE-532

Affected Products

Vendor Product
pydantic pydantic_ai
pydantic pydantic_ai

References

Advisories & Patches

https://github.com/pydantic/pydantic-ai/commit/4e013c51a50659aba2adf7853bfb22bb77f6a518 https://github.com/pydantic/pydantic-ai/commit/6b14c74cb281f899a2ae4fae5327111e33f60771 https://github.com/pydantic/pydantic-ai/commit/7ee27e38ab2e525ca60ff1a25d16413ff989fd79 https://github.com/pydantic/pydantic-ai/commit/963dec5f70d6f558997fc259356c0090cc5ea487 https://github.com/pydantic/pydantic-ai/commit/de4e61515327bd80a19cd8552001c30933e6acc3 https://github.com/pydantic/pydantic-ai/pull/8403 https://github.com/pydantic/pydantic-ai/pull/8404 https://github.com/pydantic/pydantic-ai/pull/8408 https://github.com/pydantic/pydantic-ai/pull/8428 https://github.com/pydantic/pydantic-ai/pull/8429 https://github.com/pydantic/pydantic-ai/releases/tag/v1.107.6 https://github.com/pydantic/pydantic-ai/releases/tag/v2.44.0 https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-4x9p-g9wm-8q7f

Frequently Asked Questions

What is CVE-2026-107291? +
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.3.4 until 1.107.6 and 2.44.0, OpenTelemetry instrumentation configured with InstrumentationSettings(include_content=False) can still export sensitive agent content through exception.message and exception.stacktrace events, error status descriptions, and model_request_parameters containing instructions or the prompted_output_template. The exposed data is available to readers of the configured telemetry backend and can include tool feedback, provider error bodies, runtime instructions, and structured-output templates even though message attributes are redacted. This issue does not grant new access to agent data, and deployments that do not use include_content=False are not affected by the setting bypass. This issue is fixed in versions 1.107.6 and 2.44.0. It has a CVSS v3.1 base score of 4.3 (MEDIUM).
How severe is CVE-2026-107291? +
CVE-2026-107291 has a CVSS v3.1 score of 4.3 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance. The EPSS score is 0.0062, placing it in the 0th percentile for exploitation probability.
What products are affected by CVE-2026-107291? +
CVE-2026-107291 affects products from pydantic, specifically: pydantic_ai. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2026-107291? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-65965

Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions …
CVE-2026-96879

Improper removal of sensitive information before storage or transfer vulnerability in Wikimedia Foundation's Mediawiki - FlaggedRevs extension through 1.46.0.
CVE-2026-111756

follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From version 1.16.0 to before version 1.16.1, …
CVE-2025-24884

kube-audit-rest is a simple logger of mutation/creation requests to the k8s api. If the "full-elastic-stack" example vector configuration was used …
CVE-2026-118996

CallBackery versions before 0.62.0 for Perl send users their own password hash and the admin-only user note via getUserConfig. getUserConfig() …
CVE-2026-53604

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.8, the web handler renderMobileBundle passes …

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2026-107291 — free, no signup required.

Patch and protect

Block known exploits with a web application firewall while you patch, keep your own devices clean, or test the fix on a fresh server.

Compare VPS prices →
Sucuri Sucuri → Website firewall, malware cleanup & monitoring NordPass NordPass → Password manager with breach alerts Malwarebytes Malwarebytes → Anti-malware for Windows, Mac and phones, 25% off Contabo Contabo → Cheap VPS & dedicated servers, EU/US/Asia
DigitalOcean DigitalOcean → Developer cloud: Droplets, managed databases, S3 storage NordVPN NordVPN → Hide your IP, servers in 120+ countries Surfshark Surfshark → Unlimited devices, from ~$2/mo

Affiliate links: we may earn a commission, your price stays the same.