CVE-2026-107291
CVE-2026-107291 · Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when `include_content=False`
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.3.4 until 1.107.6 and 2.44.0, OpenTelemetry instrumentation configured with InstrumentationSettings(include_content=False) can still export sensitive agent content through exception.message and exception.stacktrace events, error status descriptions, and model_request_parameters containing instructions or the prompted_output_template. The exposed data is available to readers of the configured telemetry backend and can include tool feedback, provider error bodies, runtime instructions, and structured-output templates even though message attributes are redacted. This issue does not grant new access to agent data, and deployments that do not use include_content=False are not affected by the setting bypass. This issue is fixed in versions 1.107.6 and 2.44.0.
CVSS 2.3 · Faible · EPSS 0,6% · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: python
Produits et versions concernés
pydantic-ai
- Versions du logiciel
- >= 0.3.4, < 1.107.6: Concernée
- >= 2.0.0b1, < 2.44.0: Concernée
Aucun correctif publié
pydantic-ai-slim
- Versions du logiciel
- >= 0.3.4, < 1.107.6: Concernée
- >= 2.0.0b1, < 2.44.0: Concernée
Aucun correctif publié
pydantic-ai PyPI
- Versions du logiciel
- 0.3.4
- 0.3.5
- 0.3.6
- 0.3.7
- 0.4.0
- 0.4.1
- 0.4.10
- 0.4.11
- 0.4.2
- 0.4.3
- 0.4.4
- 0.4.5
- 0.4.6
- 0.4.7
- 0.4.8
- 0.4.9
- 0.5.0
- 0.5.1
- 0.6.0
- 0.6.1
- 0.6.2
- 0.7.0
- 0.7.1
- 0.7.2
- 0.7.3
- 0.7.4
- 0.7.5
- 0.7.6
- 0.8.0
- 0.8.1
- 1.0.0
- 1.0.0b1
- 1.0.1
- 1.0.10
- 1.0.11
- 1.0.12
- 1.0.13
- 1.0.14
- 1.0.15
- 1.0.16
- 1.0.17
- 1.0.18
- 1.0.2
- 1.0.3
- 1.0.4
- 1.0.5
- 1.0.6
- 1.0.7
- 1.0.8
- 1.0.9
- 1.1.0
- 1.10.0
- 1.100.0
- 1.101.0
- 1.102.0
- 1.103.0
- 1.104.0
- 1.105.0
- 1.106.0
- 1.107.0
- 1.107.1
- 1.107.2
- 1.107.4
- 1.107.5
- 1.11.0
- 1.11.1
- 1.12.0
- 1.13.0
- 1.14.0
- 1.14.1
- 1.15.0
- 1.16.0
- 1.17.0
- 1.18.0
- 1.19.0
- 1.2.0
- 1.2.1
- 1.20.0
- 1.21.0
- 1.22.0
- 1.23.0
- 1.24.0
- 1.25.0
- 1.25.1
- 1.26.0
- 1.27.0
- 1.28.0
- 1.29.0
- 1.3.0
- 1.30.0
- 1.30.1
- 1.31.0
- 1.32.0
- 1.33.0
- 1.34.0
- 1.35.0
- 1.36.0
- 1.37.0
- 1.38.0
- 1.39.0
- 1.39.1
- 1.4.0
- 1.40.0
- 1.41.0
- 1.42.0
- 1.43.0
- 1.44.0
- 1.46.0
- 1.47.0
- 1.48.0
- 1.49.0
- 1.5.0
- 1.50.0
- 1.51.0
- 1.52.0
- 1.53.0
- 1.54.0
- 1.55.0
- 1.56.0
- 1.57.0
- 1.58.0
- 1.59.0
- 1.6.0
- 1.60.0
- 1.61.0
- 1.62.0
- 1.63.0
- 1.64.0
- 1.65.0
- 1.66.0
- 1.67.0
- 1.68.0
- 1.69.0
- 1.7.0
- 1.70.0
- 1.71.0
- 1.72.0
- 1.73.0
- 1.74.0
- 1.75.0
- 1.76.0
- 1.77.0
- 1.78.0
- 1.79.0
- 1.8.0
- 1.80.0
- 1.81.0
- 1.82.0
- 1.83.0
- 1.84.0
- 1.84.1
- 1.85.0
- 1.85.1
- 1.86.0
- 1.86.1
- 1.87.0
- 1.88.0
- 1.89.0
- 1.89.1
- 1.9.0
- 1.9.1
- 1.90.0
- 1.91.0
- 1.92.0
- 1.93.0
- 1.94.0
- 1.95.0
- 1.95.1
- 1.96.0
- 1.96.1
- 1.97.0
- 1.98.0
- 1.99.0
- Plages de versions concernées
- ECOSYSTEM: ≥ 0.3.4, < 1.107.6
Mettez à jour vers 1.107.6
pydantic-ai PyPI
- Versions du logiciel
- 2.0.0
- 2.0.0b1
- 2.0.0b2
- 2.0.0b3
- 2.0.0b4
- 2.0.0b5
- 2.0.0b6
- 2.0.0b7
- 2.1.0
- 2.10.0
- 2.11.0
- 2.12.0
- 2.13.0
- 2.14.0
- 2.14.1
- 2.15.0
- 2.16.0
- 2.17.0
- 2.18.0
- 2.19.0
- 2.2.0
- 2.20.0
- 2.21.0
- 2.22.0
- 2.23.0
- 2.24.0
- 2.25.0
- 2.26.0
- 2.27.0
- 2.27.1
- 2.28.0
- 2.29.0
- 2.3.0
- 2.30.0
- 2.31.0
- 2.31.1
- 2.32.0
- 2.32.1
- 2.32.2
- 2.33.0
- 2.34.0
- 2.35.0
- 2.35.1
- 2.35.3
- 2.36.0
- 2.37.0
- 2.38.0
- 2.39.0
- 2.4.0
- 2.40.0
- 2.41.0
- 2.42.0
- 2.43.0
- 2.5.0
- 2.5.1
- 2.6.0
- 2.7.0
- 2.8.0
- 2.9.0
- 2.9.1
- Plages de versions concernées
- ECOSYSTEM: ≥ 2.0.0b1, < 2.44.0
Mettez à jour vers 2.44.0
pydantic-ai-slim PyPI
- Versions du logiciel
- 0.3.4
- 0.3.5
- 0.3.6
- 0.3.7
- 0.4.0
- 0.4.1
- 0.4.10
- 0.4.11
- 0.4.2
- 0.4.3
- 0.4.4
- 0.4.5
- 0.4.6
- 0.4.7
- 0.4.8
- 0.4.9
- 0.5.0
- 0.5.1
- 0.6.0
- 0.6.1
- 0.6.2
- 0.7.0
- 0.7.1
- 0.7.2
- 0.7.3
- 0.7.4
- 0.7.5
- 0.7.6
- 0.8.0
- 0.8.1
- 1.0.0
- 1.0.0b1
- 1.0.1
- 1.0.10
- 1.0.11
- 1.0.12
- 1.0.13
- 1.0.14
- 1.0.15
- 1.0.16
- 1.0.17
- 1.0.18
- 1.0.2
- 1.0.3
- 1.0.4
- 1.0.5
- 1.0.6
- 1.0.7
- 1.0.8
- 1.0.9
- 1.1.0
- 1.10.0
- 1.100.0
- 1.101.0
- 1.102.0
- 1.103.0
- 1.104.0
- 1.105.0
- 1.106.0
- 1.107.0
- 1.107.1
- 1.107.2
- 1.107.4
- 1.107.5
- 1.11.0
- 1.11.1
- 1.12.0
- 1.13.0
- 1.14.0
- 1.14.1
- 1.15.0
- 1.16.0
- 1.17.0
- 1.18.0
- 1.19.0
- 1.2.0
- 1.2.1
- 1.20.0
- 1.21.0
- 1.22.0
- 1.23.0
- 1.24.0
- 1.25.0
- 1.25.1
- 1.26.0
- 1.27.0
- 1.28.0
- 1.29.0
- 1.3.0
- 1.30.0
- 1.30.1
- 1.31.0
- 1.32.0
- 1.33.0
- 1.34.0
- 1.35.0
- 1.36.0
- 1.37.0
- 1.38.0
- 1.39.0
- 1.39.1
- 1.4.0
- 1.40.0
- 1.41.0
- 1.42.0
- 1.43.0
- 1.44.0
- 1.46.0
- 1.47.0
- 1.48.0
- 1.49.0
- 1.5.0
- 1.50.0
- 1.51.0
- 1.52.0
- 1.53.0
- 1.54.0
- 1.55.0
- 1.56.0
- 1.57.0
- 1.58.0
- 1.59.0
- 1.6.0
- 1.60.0
- 1.61.0
- 1.62.0
- 1.63.0
- 1.64.0
- 1.65.0
- 1.66.0
- 1.67.0
- 1.68.0
- 1.69.0
- 1.7.0
- 1.70.0
- 1.71.0
- 1.72.0
- 1.73.0
- 1.74.0
- 1.75.0
- 1.76.0
- 1.77.0
- 1.78.0
- 1.79.0
- 1.8.0
- 1.80.0
- 1.81.0
- 1.82.0
- 1.83.0
- 1.84.0
- 1.84.1
- 1.85.0
- 1.85.1
- 1.86.0
- 1.86.1
- 1.87.0
- 1.88.0
- 1.89.0
- 1.89.1
- 1.9.0
- 1.9.1
- 1.90.0
- 1.91.0
- 1.92.0
- 1.93.0
- 1.94.0
- 1.95.0
- 1.95.1
- 1.96.0
- 1.96.1
- 1.97.0
- 1.98.0
- 1.99.0
- Plages de versions concernées
- ECOSYSTEM: ≥ 0.3.4, < 1.107.6
Mettez à jour vers 1.107.6
pydantic-ai-slim PyPI
- Versions du logiciel
- 2.0.0
- 2.0.0b1
- 2.0.0b2
- 2.0.0b3
- 2.0.0b4
- 2.0.0b5
- 2.0.0b6
- 2.0.0b7
- 2.1.0
- 2.10.0
- 2.11.0
- 2.12.0
- 2.13.0
- 2.14.0
- 2.14.1
- 2.15.0
- 2.16.0
- 2.17.0
- 2.18.0
- 2.19.0
- 2.2.0
- 2.20.0
- 2.21.0
- 2.22.0
- 2.23.0
- 2.24.0
- 2.25.0
- 2.26.0
- 2.27.0
- 2.27.1
- 2.28.0
- 2.29.0
- 2.3.0
- 2.30.0
- 2.31.0
- 2.31.1
- 2.32.0
- 2.32.1
- 2.32.2
- 2.33.0
- 2.34.0
- 2.35.0
- 2.35.1
- 2.35.3
- 2.36.0
- 2.37.0
- 2.38.0
- 2.39.0
- 2.4.0
- 2.40.0
- 2.41.0
- 2.42.0
- 2.43.0
- 2.5.0
- 2.5.1
- 2.6.0
- 2.7.0
- 2.8.0
- 2.9.0
- 2.9.1
- Plages de versions concernées
- ECOSYSTEM: ≥ 2.0.0b1, < 2.44.0
Mettez à jour vers 2.44.0
pydantic-ai PyPI
- Versions du logiciel
- 0.3.4
- 0.3.5
- 0.3.6
- 0.3.7
- 0.4.0
- 0.4.1
- 0.4.10
- 0.4.11
- 0.4.2
- 0.4.3
- 0.4.4
- 0.4.5
- 0.4.6
- 0.4.7
- 0.4.8
- 0.4.9
- 0.5.0
- 0.5.1
- 0.6.0
- 0.6.1
- 0.6.2
- 0.7.0
- 0.7.1
- 0.7.2
- 0.7.3
- 0.7.4
- 0.7.5
- 0.7.6
- 0.8.0
- 0.8.1
- 1.0.0
- 1.0.0b1
- 1.0.1
- 1.0.10
- 1.0.11
- 1.0.12
- 1.0.13
- 1.0.14
- 1.0.15
- 1.0.16
- 1.0.17
- 1.0.18
- 1.0.2
- 1.0.3
- 1.0.4
- 1.0.5
- 1.0.6
- 1.0.7
- 1.0.8
- 1.0.9
- 1.1.0
- 1.10.0
- 1.100.0
- 1.101.0
- 1.102.0
- 1.103.0
- 1.104.0
- 1.105.0
- 1.106.0
- 1.107.0
- 1.107.1
- 1.107.2
- 1.107.4
- 1.107.5
- 1.11.0
- 1.11.1
- 1.12.0
- 1.13.0
- 1.14.0
- 1.14.1
- 1.15.0
- 1.16.0
- 1.17.0
- 1.18.0
- 1.19.0
- 1.2.0
- 1.2.1
- 1.20.0
- 1.21.0
- 1.22.0
- 1.23.0
- 1.24.0
- 1.25.0
- 1.25.1
- 1.26.0
- 1.27.0
- 1.28.0
- 1.29.0
- 1.3.0
- 1.30.0
- 1.30.1
- 1.31.0
- 1.32.0
- 1.33.0
- 1.34.0
- 1.35.0
- 1.36.0
- 1.37.0
- 1.38.0
- 1.39.0
- 1.39.1
- 1.4.0
- 1.40.0
- 1.41.0
- 1.42.0
- 1.43.0
- 1.44.0
- 1.46.0
- 1.47.0
- 1.48.0
- 1.49.0
- 1.5.0
- 1.50.0
- 1.51.0
- 1.52.0
- 1.53.0
- 1.54.0
- 1.55.0
- 1.56.0
- 1.57.0
- 1.58.0
- 1.59.0
- 1.6.0
- 1.60.0
- 1.61.0
- 1.62.0
- 1.63.0
- 1.64.0
- 1.65.0
- 1.66.0
- 1.67.0
- 1.68.0
- 1.69.0
- 1.7.0
- 1.70.0
- 1.71.0
- 1.72.0
- 1.73.0
- 1.74.0
- 1.75.0
- 1.76.0
- 1.77.0
- 1.78.0
- 1.79.0
- 1.8.0
- 1.80.0
- 1.81.0
- 1.82.0
- 1.83.0
- 1.84.0
- 1.84.1
- 1.85.0
- 1.85.1
- 1.86.0
- 1.86.1
- 1.87.0
- 1.88.0
- 1.89.0
- 1.89.1
- 1.9.0
- 1.9.1
- 1.90.0
- 1.91.0
- 1.92.0
- 1.93.0
- 1.94.0
- 1.95.0
- 1.95.1
- 1.96.0
- 1.96.1
- 1.97.0
- 1.98.0
- 1.99.0
- 2.0.0
- 2.0.0b1
- 2.0.0b2
- 2.0.0b3
- 2.0.0b4
- 2.0.0b5
- 2.0.0b6
- 2.0.0b7
- 2.1.0
- 2.10.0
- 2.11.0
- 2.12.0
- 2.13.0
- 2.14.0
- 2.14.1
- 2.15.0
- 2.16.0
- 2.17.0
- 2.18.0
- 2.19.0
- 2.2.0
- 2.20.0
- 2.21.0
- 2.22.0
- 2.23.0
- 2.24.0
- 2.25.0
- 2.26.0
- 2.27.0
- 2.27.1
- 2.28.0
- 2.29.0
- 2.3.0
- 2.30.0
- 2.31.0
- 2.31.1
- 2.32.0
- 2.32.1
- 2.32.2
- 2.33.0
- 2.34.0
- 2.35.0
- 2.35.1
- 2.35.3
- 2.36.0
- 2.37.0
- 2.38.0
- 2.39.0
- 2.4.0
- 2.40.0
- 2.41.0
- 2.42.0
- 2.43.0
- 2.5.0
- 2.5.1
- 2.6.0
- 2.7.0
- 2.8.0
- 2.9.0
- 2.9.1
- Plages de versions concernées
- ECOSYSTEM: ≥ 0.3.4, < 1.107.6 ∪ ≥ 2.0.0b1, < 2.44.0
Mettez à jour vers 1.107.6; Mettez à jour vers 2.44.0
pydantic-ai-slim PyPI
- Versions du logiciel
- 0.3.4
- 0.3.5
- 0.3.6
- 0.3.7
- 0.4.0
- 0.4.1
- 0.4.10
- 0.4.11
- 0.4.2
- 0.4.3
- 0.4.4
- 0.4.5
- 0.4.6
- 0.4.7
- 0.4.8
- 0.4.9
- 0.5.0
- 0.5.1
- 0.6.0
- 0.6.1
- 0.6.2
- 0.7.0
- 0.7.1
- 0.7.2
- 0.7.3
- 0.7.4
- 0.7.5
- 0.7.6
- 0.8.0
- 0.8.1
- 1.0.0
- 1.0.0b1
- 1.0.1
- 1.0.10
- 1.0.11
- 1.0.12
- 1.0.13
- 1.0.14
- 1.0.15
- 1.0.16
- 1.0.17
- 1.0.18
- 1.0.2
- 1.0.3
- 1.0.4
- 1.0.5
- 1.0.6
- 1.0.7
- 1.0.8
- 1.0.9
- 1.1.0
- 1.10.0
- 1.100.0
- 1.101.0
- 1.102.0
- 1.103.0
- 1.104.0
- 1.105.0
- 1.106.0
- 1.107.0
- 1.107.1
- 1.107.2
- 1.107.4
- 1.107.5
- 1.11.0
- 1.11.1
- 1.12.0
- 1.13.0
- 1.14.0
- 1.14.1
- 1.15.0
- 1.16.0
- 1.17.0
- 1.18.0
- 1.19.0
- 1.2.0
- 1.2.1
- 1.20.0
- 1.21.0
- 1.22.0
- 1.23.0
- 1.24.0
- 1.25.0
- 1.25.1
- 1.26.0
- 1.27.0
- 1.28.0
- 1.29.0
- 1.3.0
- 1.30.0
- 1.30.1
- 1.31.0
- 1.32.0
- 1.33.0
- 1.34.0
- 1.35.0
- 1.36.0
- 1.37.0
- 1.38.0
- 1.39.0
- 1.39.1
- 1.4.0
- 1.40.0
- 1.41.0
- 1.42.0
- 1.43.0
- 1.44.0
- 1.46.0
- 1.47.0
- 1.48.0
- 1.49.0
- 1.5.0
- 1.50.0
- 1.51.0
- 1.52.0
- 1.53.0
- 1.54.0
- 1.55.0
- 1.56.0
- 1.57.0
- 1.58.0
- 1.59.0
- 1.6.0
- 1.60.0
- 1.61.0
- 1.62.0
- 1.63.0
- 1.64.0
- 1.65.0
- 1.66.0
- 1.67.0
- 1.68.0
- 1.69.0
- 1.7.0
- 1.70.0
- 1.71.0
- 1.72.0
- 1.73.0
- 1.74.0
- 1.75.0
- 1.76.0
- 1.77.0
- 1.78.0
- 1.79.0
- 1.8.0
- 1.80.0
- 1.81.0
- 1.82.0
- 1.83.0
- 1.84.0
- 1.84.1
- 1.85.0
- 1.85.1
- 1.86.0
- 1.86.1
- 1.87.0
- 1.88.0
- 1.89.0
- 1.89.1
- 1.9.0
- 1.9.1
- 1.90.0
- 1.91.0
- 1.92.0
- 1.93.0
- 1.94.0
- 1.95.0
- 1.95.1
- 1.96.0
- 1.96.1
- 1.97.0
- 1.98.0
- 1.99.0
- 2.0.0
- 2.0.0b1
- 2.0.0b2
- 2.0.0b3
- 2.0.0b4
- 2.0.0b5
- 2.0.0b6
- 2.0.0b7
- 2.1.0
- 2.10.0
- 2.11.0
- 2.12.0
- 2.13.0
- 2.14.0
- 2.14.1
- 2.15.0
- 2.16.0
- 2.17.0
- 2.18.0
- 2.19.0
- 2.2.0
- 2.20.0
- 2.21.0
- 2.22.0
- 2.23.0
- 2.24.0
- 2.25.0
- 2.26.0
- 2.27.0
- 2.27.1
- 2.28.0
- 2.29.0
- 2.3.0
- 2.30.0
- 2.31.0
- 2.31.1
- 2.32.0
- 2.32.1
- 2.32.2
- 2.33.0
- 2.34.0
- 2.35.0
- 2.35.1
- 2.35.3
- 2.36.0
- 2.37.0
- 2.38.0
- 2.39.0
- 2.4.0
- 2.40.0
- 2.41.0
- 2.42.0
- 2.43.0
- 2.5.0
- 2.5.1
- 2.6.0
- 2.7.0
- 2.8.0
- 2.9.0
- 2.9.1
- Plages de versions concernées
- ECOSYSTEM: ≥ 0.3.4, < 1.107.6 ∪ ≥ 2.0.0b1, < 2.44.0
Mettez à jour vers 1.107.6; Mettez à jour vers 2.44.0
Sources originales
- https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-4x9p-g9wm-8q7f
- https://github.com/pydantic/pydantic-ai/pull/8403
- https://github.com/pydantic/pydantic-ai/pull/8404
- https://github.com/pydantic/pydantic-ai/pull/8408
- https://github.com/pydantic/pydantic-ai/pull/8428
- https://github.com/pydantic/pydantic-ai/pull/8429
- https://github.com/pydantic/pydantic-ai/commit/4e013c51a50659aba2adf7853bfb22bb77f6a518
- https://github.com/pydantic/pydantic-ai/commit/6b14c74cb281f899a2ae4fae5327111e33f60771
- https://github.com/pydantic/pydantic-ai/commit/7ee27e38ab2e525ca60ff1a25d16413ff989fd79
- https://github.com/pydantic/pydantic-ai/commit/963dec5f70d6f558997fc259356c0090cc5ea487
- https://github.com/pydantic/pydantic-ai/commit/de4e61515327bd80a19cd8552001c30933e6acc3
- https://github.com/pydantic/pydantic-ai/releases/tag/v1.107.6
- https://github.com/pydantic/pydantic-ai/releases/tag/v2.44.0
- https://nvd.nist.gov/vuln/detail/CVE-2026-107291