CVE-2026-114386 | Pydantic AI Harness up to 0.58.x CodeMode run_nested_call tool_calls_limit privileges management

October 21, 2026 Yanac

A vulnerability was found in Pydantic AI Harness up to 0.58.x. It has been rated as critical. Impacted is the function run_nested_call of the component CodeMode. The manipulation of the argument tool_calls_limit leads to improper privilege management.

This vulnerability is documented as CVE-2026-114386. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More