{"data":{"id":"b2eccf7c-18f6-40ea-8a87-ca54074ecc47","title":"CVE-2026-25640: Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.34.0 to…","summary":"Pydantic AI versions from 1.34.0 before 1.51.0 contain a path traversal flaw in the web UI. The version query parameter in the CDN URL is not validated, so a crafted URL makes the server fetch and serve attacker-controlled HTML/JavaScript from another location on the same CDN. Only applications using Agent.to_web or clai web are affected, and an attacker who lures a victim into clicking the link or loading it in an iframe can run code in the victim's browser and steal chat history and other client-side data.","solution":"Fixed in 1.51.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-25640","publishedAt":"2026-02-06T20:16:11.110Z","cveId":"CVE-2026-25640","cweIds":["CWE-22","CWE-79"],"cvssScore":"7.1","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["pydantic-ai@>= 1.34.0, < 1.51.0 (fixed: 1.51.0)","pydantic-ai-slim@>= 1.34.0, < 1.51.0 (fixed: 1.51.0)"],"affectedPackageNames":["pydantic-ai","pydantic-ai-slim"],"affectedPackageRefs":["pypi:pydantic-ai","pypi:pydantic-ai-slim"],"affectedVendors":[],"affectedVendorsRaw":["Pydantic AI"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Pydantic AI web UI path traversal via version query parameter","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00371,"epssCheckedAt":"2026-11-04T12:08:35.508Z","kevDateAdded":null,"advisoryAliases":["GHSA-wjp5-868j-wqv7"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:51:00.070Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2026-01-31T02:06:16.497Z","daysToFix":-6,"fixCheckedAt":"2026-10-29T21:41:45.392Z","capecIds":["CAPEC-126","CAPEC-198","CAPEC-86"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.93,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"pydantic-ai-slim","fixedVersion":"1.51.0","matchedVersion":"1.51.0","fixReleasedAt":"2026-01-31T02:06:19.583Z","daysToFix":-6,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:41:45.241Z"},{"ecosystem":"pypi","name":"pydantic-ai","fixedVersion":"1.51.0","matchedVersion":"1.51.0","fixReleasedAt":"2026-01-31T02:06:16.497Z","daysToFix":-6,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:41:45.241Z"}]}}