CVE-2026-54249: Pydantic AI is a Python agent framework for building Generative AI applications. In versions 1.65.0 through 1.105.0, and

Pydantic AI (a Python framework for building AI applications) had a security flaw in versions 1.65.0-1.105.0 and 2.0.0b1-2.0.0b5 where attackers could access files they shouldn't by referencing them in message history. The problem was that UploadedFile references (pointers to files stored in cloud services like AWS S3 or Google Cloud Storage) were not checked before being sent to the server, allowing attackers to trick the server into reading files using its own permissions rather than the attacker's limited access.