pipecat-ai pipecat

• CVE-2026-102682 Medium 5.6 Pipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creation 0.2%
• CVE-2026-54695 High 7.5 Pipecat: Telephony WebSocket `/ws` Unauthenticated Call-Control Abuse via Attacker-Supplied Call SID 0.6%
• CVE-2026-44716 High 7.5 Pipecat: Path Traversal in Pipecat Runner `/files` Endpoint — Arbitrary File Read via `%2F`-Encoded Separator 0.4%
• CVE-2025-62373 Critical 9.8 Pipecat vulnerable to Remote Code Execution by Pickle Deserialization via LivekitFrameSerializer 0.7%