CVE-2026-22038

CVE-2026-22038 — AutoGPT Stagehand Blocks Log API Keys in Plaintext CVE ID: CVE-2026-22038 Product: AutoGPT Platform Stagehand integration Affected Versions: All versions up to and including autogpt-platform-beta-v0.6.45 Patched In: autogpt-platform-beta-v0.6.46 Vulnerability Type: CWE-532 —...

ROOT-APP-PYPI-CVE-2024-3772 CVE-2024-3772 in pydantic - Patched by Root

Root has patched CVE-2024-3772 in the pydantic package for Root:PyPI. Multiple fixed versions available...

Pydantic AI Harness tool-call limit bypass in nested CodeMode calls

Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.toolcallslimit on nested tool calls dispatched from runcode in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via runnestedcall without checkbeforetoolcall, exceeding operator limits...

CVE-2026-114386

Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.toolcallslimit on nested tool calls dispatched from runcode in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via runnestedcall without checkbeforetoolcall, exceeding operator limits...

CVE-2026-114386 Pydantic AI Harness before 0.59.0 CodeMode Tool Call Limit Bypass via run_code

Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.toolcallslimit on nested tool calls dispatched from runcode in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via runnestedcall without checkbeforetoolcall, exceeding operator limits...

EUVD-2026-107233

Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.toolcallslimit on nested tool calls dispatched from runcode in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via runnestedcall without checkbeforetoolcall, exceeding operator limits...

CVE-2026-114386 Pydantic AI Harness before 0.59.0 CodeMode Tool Call Limit Bypass via run_code

Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.toolcallslimit on nested tool calls dispatched from runcode in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via runnestedcall without checkbeforetoolcall, exceeding operator limits...

CVE-2026-114386

Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.toolcallslimit on nested tool calls dispatched from runcode in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via runnestedcall without checkbeforetoolcall, exceeding operator limits...

CVE-2026-114386 Pydantic AI Harness before 0.59.0 CodeMode Tool Call Limit Bypass via run_code

Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.toolcallslimit on nested tool calls dispatched from runcode in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via runnestedcall without checkbeforetoolcall, exceeding operator limits...

CVE-2026-114386

The Pydantic AI Harness (versions before 0.59.0 ) contains a vulnerability in the CodeMode toolset where it fails to enforce UsageLimits.tool_calls_limit on nested tool calls. Specifically, when run_code is used, the sandboxed program can invoke tools via run_nested_call() without triggering the ...

PT-2026-120573

Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool calls limit on nested tool calls dispatched from run code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run nested call without check before tool call, exceeding operato...

a13n-harness (0.0.3), a13n-stream-protocol (0.0.3) +72 more potentially affected by CVE-2026-107286 via pydantic-ai-slim (>=2.10.0, <=2.52.0)

pydantic-ai-slim PYPI version =2.10.0, =1.5.0, =0.1.0, =0.1.0, =2.1.0, =0.3.0, =0.0.0, =0.0.0, =0.1.9.62, =0.2.1, =0.2.2 - bonsai-core 0.1.0 and more Source cves: CVE-2026-107286 Source advisory: OSV:PYSEC-2026-4285...

acpkit (>=1.5.0, <=1.10.0), aer1-all (>=0.1.0, <=0.1.2) +33 more potentially affected by CVE-2026-107286 via pydantic-ai (>=2.10.0, <=2.52.0)

pydantic-ai PYPI version =2.10.0, =1.5.0, =0.1.0, =0.1.0, =2.1.0, =0.3.0, =0.1.9.62, =0.2.1, =2.10.0, =5.1.0, =0.1.8, =0.1.0, =0.1.0, =0.8.0 and more Source cves: CVE-2026-107286 Source advisory: OSV:PYSEC-2026-4276...

PYSEC-2026-4276 Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends early

This issue was posted by Codex Desktop using gpt-6.1-sol on behalf of David. Summary Applications that wrap a model with ConcurrencyLimitedModel or limitmodelconcurrency can permanently lose shared concurrency capacity when a streamed request releases its slot from a different task than the one...

Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends early

This issue was posted by Codex Desktop using gpt-6.1-sol on behalf of David. SummaryApplications that wrap a model with ConcurrencyLimitedModel or limitmodelconcurrency can permanently lose shared concurrency capacity when a streamed request releases its slot from a different task than the one th...

Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends early

This issue was posted by Codex Desktop using gpt-6.1-sol on behalf of David. SummaryApplications that wrap a model with ConcurrencyLimitedModel or limitmodelconcurrency can permanently lose shared concurrency capacity when a streamed request releases its slot from a different task than the one th...

PYSEC-2026-4285 Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends early

This issue was posted by Codex Desktop using gpt-6.1-sol on behalf of David. Summary Applications that wrap a model with ConcurrencyLimitedModel or limitmodelconcurrency can permanently lose shared concurrency capacity when a streamed request releases its slot from a different task than the one...

ara-cli (>=0.1.14.13, <=0.1.14.14), auto-browse (>=0.0.2, <=0.0.5) +56 more potentially affected by CVE-2026-107293 via pydantic-ai (>=0.3.4, <=1.107.2)

pydantic-ai PYPI version =0.3.4, =0.1.14.13, =0.0.2, =0.3.4, =0.0.174, =1.0.0, =0.9.0, =20250930132735.0.0.dev0, =0.1.102, =2.2.0, =0.6.3, =26.0.0, =26.1.1 and more Source cves: CVE-2026-107293 Source advisory: OSV:PYSEC-2026-4274...

agent-utilities (>=0.41.0, <=0.51.0), ara-cli (>=0.1.14.13, <=0.1.14.14) +61 more potentially affected by CVE-2026-107292 via pydantic-ai-slim (>=1.34.0, <=1.107.4)

pydantic-ai-slim PYPI version =1.34.0, =0.41.0, =0.1.14.13, =0.0.2, =1.34.0, =0.0.400, =1.0.0, =0.1.0, =1.6.2, =1.0.0, =1.0.0, =0.1.102, =0.1.366 and more Source cves: CVE-2026-107292 Source advisory: OSV:PYSEC-2026-4288...

PYSEC-2026-4283 Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when `include_content=False`

Summary Pydantic AI's OpenTelemetry instrumentation supports InstrumentationSettingsincludecontent=False to exclude message content — user prompts, model completions, tool call arguments and responses — from exported telemetry, so that agents can be monitored without sending sensitive content to...