CVE-2026-107286 | Pydantic AI up to 2.52.x Concurrency Limiting stream_text debounce_by denial of service (EUVD-2026-95039)

October 8, 2026 Yanac

A vulnerability was found in Pydantic AI up to 2.52.x. It has been rated as problematic. This impacts the function stream_text of the component Concurrency Limiting. The manipulation of the argument debounce_by leads to denial of service.

This vulnerability is uniquely identified as CVE-2026-107286. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More