Intel

AIKIDO-2026-51574

pydantic-ai-slim is vulnerable to Regular Expression Denial of Service (ReDoS)

CVE-2026-107290Published Sep 18, 2026
September 18, 2026

65

CVE Score

Medium

Regular Expression Denial of Service (ReDoS)

Are you affected? Scan for Free

TL;DR

The local web_fetch_tool (also used as the WebFetch capability's fallback) decodes a fetched response, extracts its title with a backtracking regular expression, and converts it to markdown; several of those steps run in time proportional to the square of the input size. A server controlled response of a megabyte or two can block the event loop for minutes, stalling every other coroutine in the process for the duration. The fix bounds and restructures the title extraction and markdown conversion so their running time no longer grows quadratically with response size.

How do I fix this?

Upgrade the pydantic-ai-slim and/or the pydantic-ai library to the patch version.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range and you expose the web_fetch_tool (or the WebFetch capability's local fallback) to fetch content from an untrusted host.

Versions

1.77.0 - 1.107.5

Fixed in 1.107.6

2.0.0 - 2.43.0

Fixed in 2.44.0

Background info

pydantic-ai-slim is vulnerable to Regular Expression Denial of Service (ReDoS) in versions 1.77.0 - 1.107.5 and 2.0.0 - 2.43.0.

Links

Fix Commits

Get secure today,
quickly and for free.

Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.

No credit card required | Scan results in 32 seconds.

Trusted by 150k+ orgs
  • Revolut
  • n8n
  • Lovable
  • Deel
  • Prove
  • Omnea