Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
3.7
cleanstart py3-pydantic-ai could let attackers run code
published 4 days ago
Summary
The py3-pydantic-ai package used for building AI workflows contains a flaw that may allow an attacker to execute arbitrary code on the system running it. This could affect any application that relies on this package, potentially compromising data and services. Apply the latest update from the supplier or uninstall the package if it is not needed.
What to do
- Update cleanstart py3-pydantic-ai to version 2.56.0-r1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | py3-pydantic-ai |
< 2.56.0-r1 Fix: upgrade to 2.56.0-r1
|
Original advisory text
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI
Security vulnerability affects the py3-pydantic-ai package. Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published15 Oct 2026
Updated15 Oct 2026
First seen15 Oct 2026
Sources
CLEANSTART-2026-BF25173 · OSV
Track software like this
Free during beta