CVE-2026-54249

🗓️ 29 Jul 2026 21:17:47Reported by [email protected]Type

Pydantic AI vulnerability lets server read files from its own or other tenants via UploadedFile references in message history; fixed in 1.106.0 and 2.0.0b6.

Reporter	Title	Published	Views	Family All 15
ATTACKERKB	CVE-2026-54249	29 Jul 202620:28	–	attackerkb
Circl	CVE-2026-54249	13 Aug 202616:32	–	circl
CVE	CVE-2026-54249	29 Jul 202620:28	–	cve
Cvelist	CVE-2026-54249 VercelAIAdapter trusts client-controlled `providerMetadata` to construct `UploadedFile` — S3/GCS confused deputy via provider metadata injection	29 Jul 202620:28	–	cvelist
EUVD	EUVD-2026-50562	13 Aug 202614:16	–	euvd
Github Security Blog	Pydantic AI: Unvalidated UploadedFile references in UI adapters allow server-side file access using the application's credentials	13 Aug 202614:16	–	github
OSV	GHSA-H7P7-W5GC-XJ3W Pydantic AI: Unvalidated UploadedFile references in UI adapters allow server-side file access using the application's credentials	13 Aug 202614:16	–	osv
OSV	PYSEC-2026-3692 Pydantic AI: Unvalidated UploadedFile references in UI adapters allow server-side file access using the application's credentials	19 Aug 202611:56	–	osv
OSV	PYSEC-2026-3693 Pydantic AI: Unvalidated UploadedFile references in UI adapters allow server-side file access using the application's credentials	19 Aug 202611:56	–	osv
Positive Technologies	PT-2026-65904	29 Jul 202600:00	–	ptsecurity