Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.3.4 until 1.107.6 and 2.44.0, OpenTelemetry instrumentation configured with InstrumentationSettings(include_content=False) can still export sensitive agent content through exception.message and exception.stacktrace events, error status descriptions, and model_request_parameters containing instructions or the prompted_output_template. The exposed data is available to readers of the configured telemetry backend and can include tool feedback, provider error bodies, runtime instructions, and structured-output templates even though message attributes are redacted. This issue does not grant new access to agent data, and deployments that do not use include_content=False are not affected by the setting bypass. This issue is fixed in versions 1.107.6 and 2.44.0.

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements Present

User Interaction None

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
pydantic pydantic-ai affected
Version Status Constraints
>= 0.3.4, < 1.107.6 affected —
>= 2.0.0b1, < 2.44.0 affected —
pydantic pydantic-ai-slim affected
Version Status Constraints
>= 0.3.4, < 1.107.6 affected —
>= 2.0.0b1, < 2.44.0 affected —

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Pydantic Subscribe
Pydantic-ai Subscribe

Project Subscriptions

Vendors Products
Pydantic Subscribe
Pydantic-ai Subscribe
Advisories
Source ID Title
Github GHSA Github GHSA GHSA-4x9p-g9wm-8q7f Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when `include_content=False`
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://github.com/pydantic/pydantic-ai/commit/4e013c51a50659aba2adf7853bfb22bb77f6a518 cve-icon cve-icon
https://github.com/pydantic/pydantic-ai/commit/6b14c74cb281f899a2ae4fae5327111e33f60771 cve-icon cve-icon
https://github.com/pydantic/pydantic-ai/commit/7ee27e38ab2e525ca60ff1a25d16413ff989fd79 cve-icon cve-icon
https://github.com/pydantic/pydantic-ai/commit/963dec5f70d6f558997fc259356c0090cc5ea487 cve-icon cve-icon
https://github.com/pydantic/pydantic-ai/commit/de4e61515327bd80a19cd8552001c30933e6acc3 cve-icon cve-icon
https://github.com/pydantic/pydantic-ai/pull/8403 cve-icon cve-icon
https://github.com/pydantic/pydantic-ai/pull/8404 cve-icon cve-icon
https://github.com/pydantic/pydantic-ai/pull/8408 cve-icon cve-icon
https://github.com/pydantic/pydantic-ai/pull/8428 cve-icon cve-icon
https://github.com/pydantic/pydantic-ai/pull/8429 cve-icon cve-icon
https://github.com/pydantic/pydantic-ai/releases/tag/v1.107.6 cve-icon cve-icon
https://github.com/pydantic/pydantic-ai/releases/tag/v2.44.0 cve-icon cve-icon
https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-4x9p-g9wm-8q7f cve-icon cve-icon
History

Thu, 08 Oct 2026 21:00:00 +0000

Type Values Removed Values Added
First Time appeared Pydantic
Pydantic pydantic-ai
Vendors & Products Pydantic
Pydantic pydantic-ai

Thu, 08 Oct 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 08 Oct 2026 16:45:00 +0000

Type Values Removed Values Added
Description Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.3.4 until 1.107.6 and 2.44.0, OpenTelemetry instrumentation configured with InstrumentationSettings(include_content=False) can still export sensitive agent content through exception.message and exception.stacktrace events, error status descriptions, and model_request_parameters containing instructions or the prompted_output_template. The exposed data is available to readers of the configured telemetry backend and can include tool feedback, provider error bodies, runtime instructions, and structured-output templates even though message attributes are redacted. This issue does not grant new access to agent data, and deployments that do not use include_content=False are not affected by the setting bypass. This issue is fixed in versions 1.107.6 and 2.44.0.
Title Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when `include_content=False`
Weaknesses CWE-212
CWE-532
References
Metrics cvssV4_0

{'score': 2.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published:

Updated: 2026-10-08T17:25:18.280Z

Reserved: 2026-10-07T15:53:23.586Z

Link: CVE-2026-107291

cve-icon Vulnrichment

Updated: 2026-10-08T17:25:13.936Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-08T17:17:14.590

Modified: 2026-10-08T20:35:31.200

Link: CVE-2026-107291

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-08T20:45:14Z

Weaknesses