Detections
Analytics

SCA: security update for pydantic-ai, pydantic-ai-slim (GHSA-q2xc-rrxj-58x9)

medium Tenable Cloud Security Plugin ID 473875

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From
 1.34.0 until 2.30.0, the Agent.to_web() and clai web development chat server does not validate the Host
 header, allowing a website visited by a developer to use DNS rebinding to reach a loopback-hosted agent as
 a same-origin service. The hostile page can read the served UI and submit chat requests that execute agent
 tools with the local process's privileges and credentials, causing data disclosure or unwanted side
 effects. Binding to localhost, Origin checks, and CSRF tokens do not prevent the same-origin DNS rebinding
 path. This issue is fixed in versions 1.107.5 and 2.30.0. (CVE-2026-107292)

Solution

Update the pydantic-ai library and its related packages to version 1.107.5 or later.

See Also

https://github.com/advisories/GHSA-q2xc-rrxj-58x9

Plugin Details

Severity: Medium

ID: 473875

Version: Revision 1.1

Type: Local

Family: SCA Checks

Published: 10/8/2026

Updated: 10/8/2026

Risk Information

VPR

Risk Factor: Low

Score: 3.9

Percentile: 52.44

Vendor

Vendor Severity: Medium

CVSS v2

Risk Factor: Medium

Base Score: 6.6

Temporal Score: 4.9

Vector: CVSS2#AV:N/AC:H/Au:N/C:P/I:C/A:P

CVSS Score Source: CVE-2026-107292

CVSS v3

Risk Factor: Medium

Base Score: 6.4

Temporal Score: 5.6

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:L

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 10/8/2026

Vulnerability Publication Date: 10/8/2026

Reference Information

CVE: CVE-2026-107292