CyberRota Analysis
AI-GeneratedThe Pydantic AI framework is vulnerable to information disclosure in versions 0.3.4 through 1.107.4 and 2.27.1, where improperly configured OpenTelemetry instrumentation can leak validation feedback, including sensitive model values, through telemetry data. This issue primarily affects deployments utilizing NativeOutput, PromptedOutput, or output validators that do not properly handle content inclusion. Organizations using these versions should prioritize upgrading to versions 1.107.4 or 2.27.1 to mitigate potential data exposure risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.3.4 until 1.107.4 and 2.27.1, OpenTelemetry instrumentation configured with InstrumentationSettings(include_content=False) can export retry prompts outside tool calls in gen_ai.input.messages and pydantic_ai.all_messages. Agents using NativeOutput, PromptedOutput, or output validators on text output can therefore disclose validation feedback, including invalid model values quoted by that feedback, to readers of the telemetry backend. Tool-call retries and deployments that do not use include_content=False are not affected by this specific path. This issue is fixed in versions 1.107.4 and 2.27.1.