pipecat vulnerabilities

2 known vulnerabilities in pipecat from Pipecat-ai. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  pipecat: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-44716Jun 10, 2026Pipecat-ai

  Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents. From version 0.0.90 to before version 1.2.0, a path traversal vulnerability exists in Pipecat's development runner (src/pipecat/runner/run.py). When t

• 9.8 Critical severity

  pipecat: Deserialization of Untrusted Data

  CVE-2025-62373Apr 23, 2026Pipecat-ai

  Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents. Versions 0.0.41 through 0.0.93 have a vulnerability in `LivekitFrameSerializer` – an optional, non-default, undocumented frame serializer class (now d