CVE-2026-107295 | Pydantic AI up to 1.107.3/2.27.x Clai Web Development Chat Endpoint Agent.to_web input validation

October 8, 2026 Yanac

A vulnerability categorized as critical has been discovered in Pydantic AI up to 1.107.3/2.27.x. Impacted is the function Agent.to_web of the component Clai Web Development Chat Endpoint. Executing a manipulation can lead to improper input validation.

This vulnerability is handled as CVE-2026-107295. The attack can be executed remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More