CVE-2026-107292
medium
CVSS v3
6.4
CVSS v4 NEW
—
VIR risk
6.4
Description
Pydantic AI Web chat UI (`Agent.to_web()`, `clai web`): the local chat endpoint does not validate the `Host` header
Predictions
Exploit likelihood
74%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No mitigations published for this CVE yet.
The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.
Propose a mitigation on Community Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here withsource_tier=community-verified.
Package impact
| Ecosystem | Package | Vulnerable | Fixed |
|---|---|---|---|
| PyPI | pydantic-ai | >=1.34.0,<1.107.5 | 1.107.5 |
| PyPI | pydantic-ai | >=2.0.0b1,<2.30.0 | 2.30.0 |
| PyPI | pydantic-ai-slim | >=1.34.0,<1.107.5 | 1.107.5 |
| PyPI | pydantic-ai-slim | >=2.0.0b1,<2.30.0 | 2.30.0 |
References
- https://github.com/pydantic/pydantic-ai/commit/394cc1d31656620704a703a2daed752afa5135fe
- https://github.com/pydantic/pydantic-ai/commit/871c7aeec5dfed2138655ccbccbf15c6d763bae7
- https://github.com/pydantic/pydantic-ai/pull/7437
- https://github.com/pydantic/pydantic-ai/pull/7438
- https://github.com/pydantic/pydantic-ai/releases/tag/v1.107.5
- https://github.com/pydantic/pydantic-ai/releases/tag/v2.30.0
- https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-q2xc-rrxj-58x9
- https://github.com/pydantic/pydantic-ai
CWEs
CWE-346 CWE-350
Community-verified mitigations for this CVE will appear above when contributors publish them.
Verify integrity in audit chain (admin only). AS-IS.