Pydantic AI's DNS-Rebind Bypass of Its Egress Allowlist
Originally published at webofmike.com on 2026-11-06. The demo repo and every command in it were run before publishing. A DNS record that changes between the moment code checks it and the moment code uses it can beat an egress allowlist that resolves a hostname twice. Pydantic AI patched exactly tha…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-11-06 18:02 · DEV Community — AI
Pydantic AI's DNS-Rebind Bypass of Its Egress Allowlist