{"data":{"id":"509b53c0-f39a-403b-80b6-6651b9824494","title":"CVE-2026-54249: Pydantic AI is a Python agent framework for building Generative AI applications. In versions 1.65.0 through 1.105.0…","summary":"Pydantic AI versions 1.65.0 through 1.105.0, and 2.0.0b1 through 2.0.0b5, do not validate UploadedFile references in message history submitted to UI adapters such as the Vercel AI adapter. A client can supply a provider file ID or cloud-storage URI (for example s3:// or gs://), and the provider resolves it with the server's own identity, letting an attacker read objects the server can access, including other tenants' objects. Exploitation requires a valid file identifier, which may be guessable depending on how the application names objects.","solution":"Fixed in 1.106.0 and 2.0.0b6.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-54249","publishedAt":"2026-07-29T21:17:47.323Z","cveId":"CVE-2026-54249","cweIds":["CWE-918"],"cvssScore":"6.8","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["pydantic-ai-slim@>= 1.65.0, < 1.106.0 (fixed: 1.106.0)","pydantic-ai-slim@>= 2.0.0b1, < 2.0.0b6 (fixed: 2.0.0b6)","pydantic-ai@>= 1.65.0, < 1.106.0 (fixed: 1.106.0)","pydantic-ai@>= 2.0.0b1, < 2.0.0b6 (fixed: 2.0.0b6)"],"affectedPackageNames":["pydantic-ai-slim","pydantic-ai"],"affectedPackageRefs":["pypi:pydantic-ai-slim","pypi:pydantic-ai"],"affectedVendors":[],"affectedVendorsRaw":["Pydantic AI","Vercel AI adapter"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Pydantic AI UI adapters forward unvalidated UploadedFile references","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","attackVector":"network","attackComplexity":"high","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00315,"epssCheckedAt":"2026-11-04T06:10:14.827Z","kevDateAdded":null,"advisoryAliases":["GHSA-h7p7-w5gc-xj3w"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:46:09.678Z","patchAvailable":true,"disclosureDate":"2026-07-29T21:17:47.323Z","fixReleasedAt":"2026-06-05T01:28:56.426Z","daysToFix":-54,"fixCheckedAt":"2026-10-29T21:32:33.044Z","capecIds":["CAPEC-664"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"pydantic-ai","fixedVersion":"2.0.0b6","matchedVersion":"2.0.0b6","fixReleasedAt":"2026-06-05T02:04:48.866Z","daysToFix":-54,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:32:32.894Z"},{"ecosystem":"pypi","name":"pydantic-ai-slim","fixedVersion":"2.0.0b6","matchedVersion":"2.0.0b6","fixReleasedAt":"2026-06-05T02:04:51.629Z","daysToFix":-54,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:32:32.894Z"},{"ecosystem":"pypi","name":"pydantic-ai","fixedVersion":"1.106.0","matchedVersion":"1.106.0","fixReleasedAt":"2026-06-05T01:28:56.426Z","daysToFix":-54,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:32:32.894Z"},{"ecosystem":"pypi","name":"pydantic-ai-slim","fixedVersion":"1.106.0","matchedVersion":"1.106.0","fixReleasedAt":"2026-06-05T01:28:59.979Z","daysToFix":-54,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:32:32.894Z"}]}}