Pydantic Ai Harness
Approved changes feed: RSS · Atom
cpe:2.3:a:pydantic:pydantic-ai-harness:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Pydantic (6f5de00e-79d0-582d-accc-2e89c5d865ef) |
|---|---|
| Product | Pydantic Ai Harness (2ded34ed-8a04-56af-b86f-a91ec0287f5a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-114386 |
vulnerable | 2026-11-03 10:15:53.459708 |
Pydantic AI Harness before 0.59.0 CodeMode Tool Call Limit Bypass via run_code
MEDIUM (4.8)
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools.
Published: 2026-10-21T12:39:43.886Z
Updated: 2026-10-21T19:55:49.371Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.