Pydantic AI: web_fetch_tool blocked_domains bypass via a hostname the resolver normalizes differently

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-107288 · Microsoft / collected KEV context

cve-program · CVE-2026-107288

• https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-22h6-qm39-v87j
• https://github.com/pydantic/pydantic-ai/pull/8407
• https://github.com/pydantic/pydantic-ai/pull/8409
• https://github.com/pydantic/pydantic-ai/pull/8421
• https://github.com/pydantic/pydantic-ai/commit/490335f8e2322e143a79337ddca9410e0176c812
• https://github.com/pydantic/pydantic-ai/commit/a9dab92099d0ef9d5d4aa34ccac8a6f1b0e51284
• https://github.com/pydantic/pydantic-ai/commit/c1f212a084cbfa0012f2044cdb4731d214b3b983
• https://github.com/pydantic/pydantic-ai/releases/tag/v1.107.6
• https://github.com/pydantic/pydantic-ai/releases/tag/v2.44.0

No related operational record is retained in the current change model.