CVE-2026-107291

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.3.4 until 1.107.6 and 2.44.0, OpenTelemetry instrumentation configured with InstrumentationSettings(include content=False) can still export sensitive agent content through exception.message and exception.stacktrace events, error status descriptions, and model request parameters containing instructions or the prompted output template. The exposed data is available to readers of the configured telemetry backend and can include tool feedback, provider error bodies, runtime instructions, and structured-output templates even though message attributes are redacted. This issue does not grant new access to agent data, and deployments that do not use include content=False are not affected by the setting bypass. This issue is fixed in versions 1.107.6 and 2.44.0.