PatchSiren

pydantic CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM pydantic CVE published 2026-06-17

CVE-2026-48782

CVE-2026-48782 is a medium-severity vulnerability in Pydantic AI, a Python agent framework for building applications and workflows with Generative AI. The issue affects versions 1.56.0 through 1.101.0, 2.0.0b1, and 2.0.0b2. An attacker can bypass the cloud-metadata blocklist by encoding metadata IP in an IPv6 transition form, exposing cloud IAM short-term credentials. This occurs when an application using [truncated]