Pipecat-ai vulnerabilities
We track 2 vulnerabilities in Pipecat-ai products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 10, 2026.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest Pipecat-ai vulnerabilities
- 7.5 High severity
pipecat: Improper Limitation of a Pathname to a Restricted Directory
Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents. From version 0.0.90 to before version 1.2.0, a path traversal vulnerability exists in Pipecat's development runner (src/pipecat/runner/run.py). When t
- 9.8 Critical severity
pipecat: Deserialization of Untrusted Data
Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents. Versions 0.0.41 through 0.0.93 have a vulnerability in `LivekitFrameSerializer` – an optional, non-default, undocumented frame serializer class (now d