{"data":{"id":"a95534bf-4356-4ac7-b445-7a8353a1ad42","title":"CVE-2026-65975: Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. In versions 1.88.0 u","summary":"Pydantic AI (a Python framework for building AI agent applications) has a security flaw in versions 1.88.0 through 1.107.0 and 2.0.0b1 through 2.4.x where the UI adapters fail to properly validate tool calls (requests for the AI to run functions) from untrusted users. When a client message is removed during cleanup, a preceding tool call that was never approved by the AI model can slip through and execute with user-supplied arguments instead of the model's arguments, potentially bypassing security checks that normally gate which tools can run.","solution":"Update to version 1.107.1 or version 2.5.0, where this issue has been fixed.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-65975","publishedAt":"2026-07-29T21:17:47.723Z","cveId":"CVE-2026-65975","cweIds":["CWE-863"],"cvssScore":"6.5","cvssSeverity":"medium","severity":"medium","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["LangChain"],"affectedVendorsRaw":["Pydantic AI"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-07-29T21:17:47.723Z","capecIds":["CAPEC-122"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":["AML.T0051"]}}