Intel

AIKIDO-2026-796700

pydantic-ai-slim is vulnerable to Information Disclosure

Information DisclosureCVE-2026-107291 Published Sep 18, 2026

23

Low Risk

This Affects:

PYTHONpydantic-ai-slim
0.3.4 - 1.107.5
Fixed in 1.107.6
2.0.0 - 2.43.0
Fixed in 2.44.0
Are you affected? Scan for Free

TL;DR

Pydantic AI's OpenTelemetry instrumentation lets InstrumentationSettings(include_content=False) exclude message content from exported telemetry, but exception events, the span error status description, and the model_request_parameters attribute keep exporting that content regardless of the setting. A tool retry, a chained exception after exhausted retries, or a model, embedding, or image-generation provider error can quote prompts, tool arguments, or the provider's error body, and the request attribute serializes the agent's full instructions and prompted-output template. The fix withholds the exception message and stack trace, the status description, and the instruction and template content when include_content is false, keeping only structural information.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range and you set InstrumentationSettings(include_content=False) to exclude message content from telemetry.

Background info

pydantic-ai-slim is vulnerable to Information Disclosure in versions 0.3.4 - 1.107.5 and 2.0.0 - 2.43.0.

How to fix this

Upgrade the pydantic-ai-slim and/or the pydantic-ai library to the patch version.

Links

Fix Commits

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform