Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when `include_content=False`

🗓️ 15 Oct 2026 10:22:51Reported by Python Packaging AdvisoryType

pypa🔗 github.com👁 3 Views

Pydantic AI OpenTelemetry instrumentation fails to redact retry prompt content.

Reporter	Title	Published	Views	Family All 29
CVE	CVE-2026-107293	8 Oct 202616:57	–	cve
Cvelist	CVE-2026-107293 Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when `include_content=False`	8 Oct 202616:57	–	cvelist
EUVD	EUVD-2026-95102	8 Oct 202616:57	–	euvd
Github Security Blog	Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when `include_content=False`	8 Oct 202617:16	–	github
Mend	CVE-2026-107293	8 Oct 202616:57	–	mend
NVD	CVE-2026-107293	8 Oct 202617:17	–	nvd
osv-cleanstart	CLEANSTART-2026-XD01399 Pydantic AI is a Python agent framework for building applications and workflows with Generative AI	15 Oct 202600:40	–	osv-cleanstart
osv-ghsa	GHSA-3GH4-CGHQ-F8V4 Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when `include_content=False`	8 Oct 202617:16	–	osv-ghsa
Positive Technologies	PT-2026-108053	8 Oct 202600:00	–	ptsecurity
PyPA	Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when `include_content=False`	15 Oct 202610:22	–	pypa

Vulners

Node

pypi pydantic-ai-slimRange2.0.0b1–2.27.1

Source	Link
github	www.github.com/pydantic/pydantic-ai/security/advisories/GHSA-3gh4-cghq-f8v4
github	www.github.com/pydantic/pydantic-ai/pull/7357
github	www.github.com/pydantic/pydantic-ai/commit/fe9dbed7b7ccf7e7128b5786886e4441f6f5594f
github	www.github.com/pydantic/pydantic-ai
github	www.github.com/pydantic/pydantic-ai/releases/tag/v2.27.1
pypi	www.pypi.org/project/pydantic-ai-slim
github	www.github.com/advisories/GHSA-3gh4-cghq-f8v4
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-107293

15 Oct 2026 14:38Current

5.8Medium risk

Vulners AI Score5.8

CVSS 42.3

CVSS 3.15.3

EPSS0.00297

SSVC