PT-2026-108659

Summary The Pydantic AI development web chat UI Agent.to web, clai web did not check the content type of requests to its chat endpoint. This allowed a website visited by a developer to submit a request to a chat UI running on that developer's machine, causing the served agent to run and to execut...

PT-2026-108047

Name of the Vulnerable Software and Affected Versions Pydantic AI versions 1.34.0 through 1.107.4 Pydantic AI versions 2.0.0 through 2.29.9 Description The Agent.to web and clai web development chat server fails to validate the Host header of incoming requests. This allows a malicious website...

PT-2026-108055

Name of the Vulnerable Software and Affected Versions Pydantic AI versions 1.34.0 through 1.107.3 Pydantic AI versions 2.x and earlier Description The Agent.to web and clai web development chat endpoints lack request content-type validation. This allows a website visited by a developer to submit ...

PT-2026-108666

Summary The Pydantic AI development web chat UI Agent.to web, clai web does not validate the Host header of incoming requests. A website a developer visits can use DNS rebinding to make requests to a chat UI running on that developer's machine appear same-origin to the browser, causing the served...