CVE-2026-107291

A flaw was found in Pydantic AI. When OpenTelemetry instrumentation is configured to exclude content, sensitive agent data is still exported to the telemetry backend through exception details, error status descriptions, and model request parameters. An attacker or unauthorized user with read acce...

PT-2026-108626

Summary Pydantic AI's OpenTelemetry instrumentation supports InstrumentationSettingsinclude content=False to exclude message content — user prompts, model completions, tool call arguments and responses, and any other message content — from exported telemetry, so that agents can be monitored witho...