CVE-2026-65975: Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. In versions 1.88.0 u
Summary
Pydantic AI (a Python framework for building AI agent applications) has a security flaw in versions 1.88.0 through 1.107.0 and 2.0.0b1 through 2.4.x where the UI adapters fail to properly validate tool calls (requests for the AI to run functions) from untrusted users. When a client message is removed during cleanup, a preceding tool call that was never approved by the AI model can slip through and execute with user-supplied arguments instead of the model's arguments, potentially bypassing security checks that normally gate which tools can run.
Solution / Mitigation
Update to version 1.107.1 or version 2.5.0, where this issue has been fixed.
Vulnerability Details
6.5(medium)
EPSS: 0.0%
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
network
low
none
none
July 29, 2026
Classification
Taxonomy References
Affected Vendors
Related Issues
CVE-2026-34371: LibreChat is a ChatGPT clone with additional features. Prior to 0.8.4, LibreChat trusts the name field returned by the e
CVE-2024-27444: langchain_experimental (aka LangChain Experimental) in LangChain before 0.1.8 allows an attacker to bypass the CVE-2023-
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-65975
First tracked: July 29, 2026 at 08:08 PM
Classified by LLM (prompt v3) · confidence: 92%