All 4 CVE vulnerabilities found in pipecat, with AI-generated Chinese analysis, references, and POCs.
Vendor: pipecat-ai
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-102682 | Pipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creation CWE-345 | 5.6 | Medium | 2026-10-14 |
| CVE-2026-54695 | Pipecat: Telephony WebSocket `/ws` Unauthenticated Call-Control Abuse via Attacker-Supplied Call SID CWE-862 | 7.5 | High | 2026-07-09 |
| CVE-2026-44716 | Pipecat: Path Traversal in Pipecat Runner `/files` Endpoint — Arbitrary File Read via `%2F`-Encoded Separator CWE-22 | 7.5 | High | 2026-06-09 |
| CVE-2025-62373 | Pipecat vulnerable to Remote Code Execution by Pickle Deserialization via LivekitFrameSerializer CWE-502 | 9.8 | Critical | 2026-04-23 |
All 4 known CVE vulnerabilities affecting pipecat with full Chinese analysis, references, and POCs where available.