pipecat-ai vulnerabilities (PyPI)

4 vulnerabilities.

• pipecat-ai PyPI Pipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creation CVE-2026-102682 Fix available 5.6 MediumOctober 14, 2026
• pipecat-ai PyPI Pipecat: Telephony WebSocket `/ws` Unauthenticated Call-Control Abuse via Attacker-Supplied Call SID CVE-2026-54695 Fix available 7.5 HighJune 18, 2026
• pipecat-ai PyPI Pipecat: Path Traversal in Pipecat Runner `/files` Endpoint — Arbitrary File Read via `%2F`-Encoded Separator CVE-2026-44716 Fix available 7.5 HighMay 15, 2026
• pipecat-ai PyPI Pipecat vulnerable to Remote Code Execution by Pickle Deserialization via LivekitFrameSerializer CVE-2025-62373 Fix available 9.8 CriticalApril 23, 2026