pipecat records

3 published records for vendor pipecat.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2025-62373No exploit	Pipecat vulnerable to Remote Code Execution by Pickle Deserialization via LivekitFrameSerializerpipecat · pipecat · CWE-502 pre-auth RCE Deserialization	Critical9.8	—	0.7%	Apr 23, 2026
30Monitor	CVE-2026-44716No exploit	Pipecat: Path Traversal in Pipecat Runner `/files` Endpoint — Arbitrary File Read via `%2F`-Encoded Separatorpipecat · pipecat · CWE-22 Pre-auth Path traversal	High7.5	—	0.6%	Jun 9, 2026
26Monitor	CVE-2026-54695No exploit	Pipecat: Telephony WebSocket `/ws` Unauthenticated Call-Control Abuse via Attacker-Supplied Call SIDpipecat · pipecat · CWE-862 Pre-auth Auth bypass Broken access control (IDOR)	Medium6.5	—	0.6%	Jul 9, 2026

CVE-2025-62373
39Monitor
Pipecat vulnerable to Remote Code Execution by Pickle Deserialization via LivekitFrameSerializer
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Deserialization
pipecat · pipecatApr 23, 2026
CVE-2026-44716
30Monitor
Pipecat: Path Traversal in Pipecat Runner `/files` Endpoint — Arbitrary File Read via `%2F`-Encoded Separator
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Path traversal
pipecat · pipecatJun 9, 2026
CVE-2026-54695
26Monitor
Pipecat: Telephony WebSocket `/ws` Unauthenticated Call-Control Abuse via Attacker-Supplied Call SID
MediumCVSS 6.5No exploitEPSS 1%
pipecat · pipecatJul 9, 2026