Bug 2548049 (CVE-2026-107292)
| Summary: | CVE-2026-107292 pydantic-ai: pydantic-ai: Unauthorized tool execution via DNS rebinding | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | CC: | bbrownin, ebourniv, hasun, nyancey, ptisnovs, sbunciak |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in pydantic-ai. The web development chat server fails to validate incoming HTTP Host headers, allowing a remote attacker to achieve unauthorized tool execution and information disclosure. If a developer running the local development server visits a malicious website, an attacker can leverage Domain Name System (DNS) rebinding to bypass browser protections. This enables the attacker to send requests that execute agent tools with the permissions and credentials of the local process.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
OSIDB Bzimport
2026-10-08 16:41:56 UTC
|