Pydantic AI AI Updates: June 11, 2026

1. Pydantic AI v1.107.0 Patches Confused-Deputy File Read in VercelAIAdapter

Pydantic AI. The v1.107.0 release fixes a confused-deputy vulnerability in VercelAIAdapter where client-controlled file metadata could be misused to access unauthorized files, affecting applications that pass untrusted client message history to agents through UI adapters. The release also adds a known_model_names() function to enumerate supported models, OpenRouter prompt caching via CachePoint, and support for Anthropic’s Claude Fable 5 and Claude Mythos 5. Additional fixes address Bedrock stream events and token counting for AnthropicModel with native tools. Source

2. Pydantic AI Ships v2.0.0b7 Beta With Same Security and Model Updates

Pydantic AI. The v2.0.0b7 beta incorporates the changes from v1.107.0, including the security fix for UploadedFile handling in UI adapters, the known_model_names() enumeration, OpenRouter prompt caching, and Claude Fable 5 and Mythos 5 model support. The release continues the project’s v2 beta line alongside the maintained v1 branch. Source