Lucene search
+L

26 matches found

Github Security Blog
Github Security Blog
•added 2026/10/21 3:42 p.m.•0 views

Pydantic AI Harness tool-call limit bypass in nested CodeMode calls

Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.toolcallslimit on nested tool calls dispatched from runcode in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via runnestedcall without checkbeforetoolcall, exceeding operator limits...

6.3CVSS5.8AI score0.00346EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder