Vulnerabilities in pipecat-ai

4 results

CVE-2025-62373CRITICALPipecat vulnerable to Remote Code Execution by Pickle Deserialization via LivekitFrameSerializerEPSS 0.7%CVE-2026-54695HIGHPipecat: Telephony WebSocket `/ws` Unauthenticated Call-Control Abuse via Attacker-Supplied Call SIDEPSS 0.6%CVE-2026-44716HIGHPipecat: Path Traversal in Pipecat Runner `/files` Endpoint — Arbitrary File Read via `%2F`-Encoded SeparatorEPSS 0.4%CVE-2026-102682MEDIUMPipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creationEPSS 0.2%