CVE-2026-102682 debrief: Public exposure of Pipecat's development runner can allow unauthenticated bot session creation. The development runner binds to localhost by default but can be made reachable from an untrusted network if deliberately configured to do so. If exposed, an unauthenticated caller may invoke endpoints to create bot sessions or Daily rooms, potentially consuming local resources and third [truncated]
The CVE record for CVE-2026-54695 was published on 2026-07-09T19:17:06.540Z and has not been modified since then. The NVD entry is currently Undergoing Analysis. This vulnerability affects Pipecat framework versions prior to 1.4.0, allowing unauthenticated call-control attacks. The Pipecat development runner registers a /ws WebSocket endpoint for telephony testing that accepts connections without authenti [truncated]
CVE-2026-44716 is a high-severity path traversal vulnerability in Pipecat, a Python framework for building real-time voice and multimodal conversational agents. The vulnerability exists in Pipecat's development runner (src/pipecat/runner/run.py) from version 0.0.90 to before version 1.2.0. When the runner is started with the --folder flag, it exposes a GET /files/{filename:path} download endpoint. The fil [truncated]
CVE-2025-62373 is a critical vulnerability in the Pipecat open-source Python framework, specifically in the deprecated `LivekitFrameSerializer` class. This class, used for LiveKit integration, deserializes untrusted WebSocket client data using Python's `pickle.loads()` without validation or sanitization, allowing for remote code execution (RCE) on the server. The vulnerability affects Pipecat versions 0.0 [truncated]
