Skip to content
Threat Feed
Subscribe

Product

Pydantic-Ai (>= 2.10.0, < 2.53.0)

1 brief RSS
high advisory

CSRF Vulnerability in Pydantic AI Web UI Enables Unauthorized Agent Execution

A CSRF vulnerability (CVE-2026-107295) in Pydantic AI web interfaces allows malicious websites to trigger unauthorized agent runs and tool execution on a developer's local machine.

pydantic-ai +3 web-application csrf cve-2026-107295 denial-of-service vulnerability
2t 1c