8 matches found
CVE-2026-107291
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.3.4 until 1.107.6 and 2.44.0, OpenTelemetry instrumentation configured with InstrumentationSettingsincludecontent=False can still export sensitive agent content through exception.message and...
CVE-2026-107291 Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when `include_content=False`
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.3.4 until 1.107.6 and 2.44.0, OpenTelemetry instrumentation configured with InstrumentationSettingsincludecontent=False can still export sensitive agent content through exception.message and...
CVE-2026-107291 Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when `include_content=False`
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.3.4 until 1.107.6 and 2.44.0, OpenTelemetry instrumentation configured with InstrumentationSettingsincludecontent=False can still export sensitive agent content through exception.message and...
CVE-2026-107291
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.3.4 until 1.107.6 and 2.44.0, OpenTelemetry instrumentation configured with InstrumentationSettingsincludecontent=False can still export sensitive agent content through exception.message and...
CVE-2026-107291 Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when `include_content=False`
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.3.4 until 1.107.6 and 2.44.0, OpenTelemetry instrumentation configured with InstrumentationSettingsincludecontent=False can still export sensitive agent content through exception.message and...
CVE-2026-107291
A vulnerability exists in Pydantic AI (specifically versions prior to 1.107.6 and 2.44.0) where OpenTelemetry instrumentation fails to redact sensitive data when InstrumentationSettings(include_content=False) is configured. Despite the redaction setting, sensitive content—including tool feedback ...
CVE-2026-107291: Improper Removal of Sensitive Information Before Storage or Transfer
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.3.4 until 1.107.6 and 2.44.0, OpenTelemetry instrumentation configured with InstrumentationSettingsincludecontent=False can still export sensitive agent content through exception.message and...
PT-2026-108046
Name of the Vulnerable Software and Affected Versions Pydantic AI versions 0.3.4 through 1.107.5 Pydantic AI versions 2.0.0 through 2.43.9 Description OpenTelemetry instrumentation configured with InstrumentationSettingsinclude content=False fails to exclude sensitive agent content from exported...