Pipecat-ai Pipecat vulnerabilities
- pipecat-ai pipecat Pipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creation 5.6 Medium
- pipecat Pipecat: Telephony WebSocket `/ws` Unauthenticated Call-Control Abuse via Attacker-Supplied Call SID 7.5 High
- pipecat Pipecat: Path Traversal in Pipecat Runner `/files` Endpoint — Arbitrary File Read via `%2F`-Encoded Separator 7.5 High
- pipecat Pipecat vulnerable to Remote Code Execution by Pickle Deserialization via LivekitFrameSerializer 9.8 Critical