AIKIDO-2026-11021
pydantic-ai-backend is vulnerable to Race Condition leading to Denial of Service (DoS)
45
Medium Risk
This Affects:
pydantic-ai-backendTL;DR
A race condition in SessionManager.get_or_create() allowed concurrent requests using the same session_id to bypass the check-then-create logic, causing multiple sandboxes to be created for a single session and potentially leaving one orphaned. This can lead to resource leakage, inconsistent session isolation, and unintended execution environments. An attacker might exploit this by sending parallel requests for the same session identifier, intentionally triggering duplicate sandbox creation to exhaust resources, interfere with session integrity, or increase the chances of interacting with a leaked sandbox instance.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
pydantic-ai-backend is vulnerable to Race Condition leading to Denial of Service (DoS) in versions 0.1.0 - 0.2.9.
How to fix this
Upgrade the pydantic-ai-backend library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant