Detections
Analytics

SCA: security update for pydantic-ai, pydantic-ai-slim (GHSA-h7p7-w5gc-xj3w)

medium Tenable Self-Hosted Container Security Plugin ID 445946

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - Pydantic AI is a Python agent framework for building Generative AI applications. In versions 1.65.0
 through 1.105.0, and 2.0.0b1 through 2.0.0b5, a client that submits message history to a Pydantic AI UI
 adapter (such as the Vercel AI adapter) can reference arbitrary files in the application's model-provider
 or cloud-storage account. While file URL parts are validated against a scheme allowlist, UploadedFile
 references — which point to a file by provider file ID or cloud-storage URI (e.g. s3://…, gs://…) — were
 forwarded without validation. Because the provider resolves an UploadedFile using the server-side identity
 (IAM role, service account, or provider API key) rather than the client's, an attacker can craft message
 history to make the server read objects from its own account or other tenants, given a referenceable
 identifier. Exploitation requires a valid file identifier, which is not always unguessable depending on
 how the application names objects. This issue has been fixed in versions 1.106.0 and 2.0.0b6.
 (CVE-2026-54249)

Solution

Update the pydantic-ai library and its related packages to version 1.106.0 or later.

See Also

https://github.com/advisories/GHSA-h7p7-w5gc-xj3w

Plugin Details

Severity: Medium

ID: 445946

Version: Revision 1.1

Type: Local

Family: SCA Checks

Published: 8/13/2026

Updated: 8/13/2026

Risk Information

VPR

Risk Factor: Low

Score: 3.3

Percentile: 51.06

Vendor

Vendor Severity: Medium

CVSS v2

Risk Factor: Medium

Base Score: 5.4

Temporal Score: 4

Vector: CVSS2#AV:N/AC:H/Au:N/C:C/I:N/A:N

CVSS Score Source: CVE-2026-54249

CVSS v3

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5.9

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 8/13/2026

Vulnerability Publication Date: 7/29/2026

Reference Information

CVE: CVE-2026-54249

cwe: CWE-918