Vulnerabilities

TI-2026-74404 CVE-2026-102682 · GHSA-hqm2-cfx2-2vgh

Missing authorization in Pipecat development runner endpoints

LOW 25

Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents.

CVSS 3.1MEDIUM 5.6 Network No auth No interaction EPSS 0.00234 Published 2026-10-14 Fixed in 1.6.0 CWE-345

TI-2026-39516 CVE-2026-54695 · GHSA-j8cv-x86q-rj85

HIGH 66

Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00564 Published 2026-07-09 Fixed in 1.4.0 CWE-862

TI-2026-32603 CVE-2026-44716 · GHSA-3363-2ph6-35wh

HIGH 72

Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00423 Published 2026-06-09 Fixed in 1.2.0 CWE-22

TI-2025-38641 CVE-2025-62373 · GHSA-c2jg-5cp7-6wc7

HIGH 82

Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00701 Published 2026-04-23 Fixed in 0.0.94 CWE-502