pipecat-ai has 2 CVEs on record. The median CVSS is 7.5 (high).

CVEs per month

Last 12 months, by publish date

1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09

Exploited share: 0% vs 1% corpus
Median CVSS: 7.5
Publish → KEV: —
Last 90 days: 0 prev 2

Weakness classes

CWE-862 1

Products

pipecat-ai 2

Follow pipecat-ai:RSS feed Save a search →Embed badge ↗

2

Total CVEs

0

Critical

0

CISA KEV

0

Exploited

Worst active — by depth score

CVE-2026-54695High· 7.5Pipecat: Telephony WebSocket `/ws` Unauthenticated Call-Control Abuse via Attacker-Supplied Call SID41
CVE-2026-44716High· 7.5Pipecat: Path Traversal in Pipecat Runner `/files` Endpoint — Arbitrary File Read via `%2F`-Encoded Separator41

pipecat-ai vulnerabilities

CVEs affecting pipecat-ai, newest first. Open any entry for full detail, references, and exploit status.

2 CVEsRSS

CVE-2026-54695High· 7.5

Pipecat: Telephony WebSocket `/ws` Unauthenticated Call-Control Abuse via Attacker-Supplied Call SID

Pipecat: Telephony WebSocket `/ws` Unauthenticated Call-Control Abuse via Attacker-Supplied Call SID

▾ Twilightpipecat-ai · pipecat-aiEPSS 0.56%via GHSA

CVE-2026-44716High· 7.5

Pipecat: Path Traversal in Pipecat Runner `/files` Endpoint — Arbitrary File Read via `%2F`-Encoded Separator

Pipecat: Path Traversal in Pipecat Runner `/files` Endpoint — Arbitrary File Read via `%2F`-Encoded Separator

▾ Twilightpipecat-ai · pipecat-aiEPSS 0.42%via OSV

pipecat-ai vulnerabilities (CVEs) · VulnSea