Vulnerabilities

TI-2026-39516 CVE-2026-54695 · GHSA-j8cv-x86q-rj85

Pipecat: Telephony WebSocket `/ws` Unauthenticated Call-Control Abuse via Attacker-Supplied Call SID

HIGH 66

Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00564 Published 2026-07-09 Fixed in 1.4.0 CWE-862

TI-2026-32603 CVE-2026-44716 · GHSA-3363-2ph6-35wh

HIGH 72

Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00423 Published 2026-06-09 Fixed in 1.2.0 CWE-22

TI-2025-38641 CVE-2025-62373 · GHSA-c2jg-5cp7-6wc7

HIGH 82

Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00701 Published 2026-04-23 Fixed in 0.0.94 CWE-502