Skip to content
Threat Feed
Subscribe

Product

Pydantic-Ai-Slim (>= 1.34.0, < 1.107.4 and >= 2.0.0b1, < 2.28.0)

1 brief RSS
high advisory

CSRF Vulnerability in Pydantic AI Web UI Enables Unauthorized Agent Execution

A CSRF vulnerability (CVE-2026-107295) in Pydantic AI web interfaces allows malicious websites to trigger unauthorized agent runs and tool execution on a developer's local machine.

pydantic-ai +3 web-application csrf cve-2026-107295 denial-of-service vulnerability
2t 1c