CVE Browser

Page 1

Pipecat: Telephony WebSocket `/ws` Unauthenticated Call-Control Abuse via Attacker-Supplied Call SID

Pipecat: Path Traversal in Pipecat Runner `/files` Endpoint — Arbitrary File Read via `%2F`-Encoded Separator

Pipecat vulnerable to Remote Code Execution by Pickle Deserialization via LivekitFrameSerializer

CVE ID	Description	Severity	CVSS	EPSS	Published
CVE-2026-54695	Pipecat: Telephony WebSocket `/ws` Unauthenticated Call-Control Abuse via Attacker-Supplied Call SID	HIGH	7.5	0.56%	Jul 9, 2026
CVE-2026-44716	Pipecat: Path Traversal in Pipecat Runner `/files` Endpoint — Arbitrary File Read via `%2F`-Encoded Separator	HIGH	7.5	0.56%	Jun 10, 2026
CVE-2025-62373	Pipecat vulnerable to Remote Code Execution by Pickle Deserialization via LivekitFrameSerializer	CRITICAL	9.8	0.70%	Apr 23, 2026

Rows per page

Showing 1 to 3 CVEs · page 1