Detections
Analytics

SCA: security update for pydantic-ai, pydantic-ai-slim (GHSA-vmxc-h2x2-jmf3)

medium Tenable Self-Hosted Container Security Plugin ID 473874

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From
 1.56.0 until 1.107.6 and 2.44.0, applications that opt attacker-influenced URLs into local network access
 through FileUrl with force_download='allow-local' or web_fetch_tool with allow_local_urls=True can bypass
 the cloud-metadata blocklist by appending an IPv6 zone identifier to an IPv6 metadata address. IPv6Address
 equality and hashing include the zone identifier, so the blocklist comparison fails even though the
 network stack ignores the zone on a non-link-local destination and reaches the metadata service,
 potentially exposing cloud IAM credentials. The opt-in settings are disabled by default, and the issue
 requires an IPv6-enabled environment. This issue is fixed in versions 1.107.6 and 2.44.0.
 (CVE-2026-107289)

Solution

Update the pydantic-ai library and its related packages to version 1.107.6 or later.

See Also

https://github.com/advisories/GHSA-vmxc-h2x2-jmf3

Plugin Details

Severity: Medium

ID: 473874

Version: Revision 1.1

Type: Local

Family: SCA Checks

Published: 10/8/2026

Updated: 10/8/2026

Risk Information

VPR

Risk Factor: Low

Score: 3.3

Percentile: 50.55

Vendor

Vendor Severity: Medium

CVSS v2

Risk Factor: Medium

Base Score: 5.4

Temporal Score: 4

Vector: CVSS2#AV:N/AC:H/Au:N/C:C/I:N/A:N

CVSS Score Source: CVE-2026-107289

CVSS v3

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5.9

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 10/8/2026

Vulnerability Publication Date: 10/8/2026

Reference Information

CVE: CVE-2026-107289