CVE-2026-107289 | Pydantic AI up to 1.107.5/2.43.x IPv6 Address force_download/allow_local_urls input validation

A vulnerability was found in Pydantic AI up to 1.107.5/2.43.x. It has been classified as problematic. Affected is an unknown function of the component IPv6 Address Handler. The manipulation of the argument force_download/allow_local_urls leads to improper input validation.

This vulnerability is traded as CVE-2026-107289. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More