CVE-2026-46678

Pydantic AI is a Python agent framework for building Generative AI applications. In versions 1.56.0 through 1.98.0, when an application opts a URL into forcedownload='allow-local' disabling the default block on private/internal IPs, the cloud-metadata blocklist could be bypassed by encoding the...

CVE-2026-46678

creationtimestamp| type| source ---|---|--- 2026-06-17 00:18:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mogzzvej3z22...

ara-cli (>=0.1.14.13 <=0.1.14.14), clai (>=1.5.0 <=1.98.0) +47 more potentially affected by CVE-2026-25580 +1 more via pydantic-ai-slim (>=1.56.0 <=1.98.0)

pydantic-ai-slim PYPI version =1.56.0, =0.1.14.13, =1.5.0, =0.1.0a1, =0.0.400, =1.0.0, =1.0.3, =0.1.0, =0.1.1, =0.1.1, =0.1.0, =0.0.1, =0.0.1, =0.0.8 and more Source cves: CVE-2026-25580, CVE-2026-46678 Source advisory: SNYK:PYTHON-PYDANTICAISLIM-16796278...

ara-cli (>=0.1.14.13 <=0.1.14.14), clai (>=1.5.0 <=1.98.0) +23 more potentially affected by CVE-2026-46678 via pydantic-ai (>=1.56.0 <=1.98.0)

pydantic-ai PYPI version =1.56.0, =0.1.14.13, =1.5.0, =1.0.0, =0.1.1, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.1.0, =0.1.0rc6 - open-aura =0.1.0 and more Source cves: CVE-2026-46678 Source advisory: OSV:GHSA-CQP8-FCVH-X7R3...