pipecat-ai vulnerabilities
4 published CVEs name pipecat-ai among the affected products.
- 4Published CVEs4 of them scored
- 4Last 12 monthspublished in the last year
- 1Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-102682
Pipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creation
pipecat-ai · pipecat
Medium5.6 - CVE-2026-54695
Pipecat: Telephony WebSocket `/ws` Unauthenticated Call-Control Abuse via Attacker-Supplied Call SID
pipecat-ai · pipecat
High7.5 - CVE-2026-44716
Pipecat: Path Traversal in Pipecat Runner `/files` Endpoint — Arbitrary File Read via `%2F`-Encoded Separator
pipecat-ai · pipecat
High7.5 - CVE-2025-62373
Pipecat vulnerable to Remote Code Execution by Pickle Deserialization via LivekitFrameSerializer
pipecat-ai · pipecat
Critical9.8