Pydantic AI v2.44.0 (2026-09-16)

Pydantic AI releases published Pydantic AI v2.44.0 (2026-09-16). This release-watch entry was generated from the project's official GitHub release feed and is kept separate from human-reviewed editorial analysis. Release notes: 🛡️ Security This release fixes four security issues, all of them reached through web fetch tool or OpenTelemetry instrumentation. See each advisory for full details and affected versions. GHSA-vmxc-h2x2-jmf3 (moderate): the cloud-metadata and private-IP blocklists could be bypassed with an IPv6 zone identifier on a URL opted into local network access, via FileUrl(force download='allow-local') or web fetch tool(allow local urls=True) . Both are off by default. Reported by @euriconicacio . ( 8401 ) GHSA-fpf4-vwcp-v4hp (moderate): web fetch processed responses in superlinear time on the event loop, in both the HTML conversion and the charset decode, so a single attacker-chosen page could stall every agent in the process. Reported by @BrianWillows . ( 8397 , 8418 , 8433 ) GHSA-22h6-qm39-v87j (low): web fetch tool 's domain lists were compared as written rather than in the form the resolver…

• Review the official Pydantic AI releases release notes before upgrading.
• Check compatibility, migration, and security notes against your current agent stack.
• Run focused regression tests before production rollout.