CVE-2026-114386 — Pydantic AI Harness before 0.59.0 CodeMode Tool Call Limit Bypass via run_code
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected c…
Published: 2026-10-21 · CVSS: 6.3 · CVSS 4.0
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7