Skip to content
Ppipecat-ai
Products
| Product | CVEs | Exploited | Latest |
|---|
| pipecat | 4 | – | Oct 14, 2026 |
Exploited and recent CVEs
-
CVE-2026-102682
Medium 5.6
Pipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creation
0.2%
-
CVE-2026-54695
High 7.5
Pipecat: Telephony WebSocket `/ws` Unauthenticated Call-Control Abuse via Attacker-Supplied Call SID
0.6%
-
CVE-2026-44716
High 7.5
Pipecat: Path Traversal in Pipecat Runner `/files` Endpoint — Arbitrary File Read via `%2F`-Encoded Separator
0.4%
-
CVE-2025-62373
Critical 9.8
Pipecat vulnerable to Remote Code Execution by Pickle Deserialization via LivekitFrameSerializer
0.7%