ZDF
Sign inSign up

Vulnerabilities

Vulnerability · CVE-2026-102682

Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents.

Published Oct 14, 2026 · catalog updated Oct 15, 2026 · Pipecat is an open-source

Check if you run it

No confirmed exploitation is on record for CVE-2026-102682. EPSS is 0.23%. Act only if a listed version of Pipecat is an open-source is installed.

Gaps on this record

  • The stored product name is a package slug. The name on this page is taken from the title (Pipecat is an open-source).
  • No vendor fix or required action is stored. Compare the linked advisory before you change production.
Severity
Medium5.6
Known exploitation
Not in CISA/VulnCheck KEV
EPSS
0.23%
Remediation
Version ranges on file
Affected products
PyPI pipecat-ai · pip pipecat-ai · pypi pipecat-ai

Pipecat’s built-in development runner exposes endpoints that create bot sessions and, for the Daily transport, paid Daily rooms. These development endpoints intentionally do not authenticate callers. The runner binds to localhost by default and is designed exclusively for local development. It is not built or supported as a production server. Exploitation therefore requires an operator to deliberately make the development runner reachable from an untrusted network, such as by setting --host 0.0.0.0, publishing its port, or using a public tunnel without access controls. If exposed in this way, an unauthenticated caller may invoke endpoints including /start, /daily, and /daily-dialin-webhook. Depending on the endpoint and configuration, this can create a bot session or Daily room and may return a room URL and join token. Repeated requests may also consume local resources and third-party service quotas. The consequences of interacting with a launched bot depend on that bot’s configuration and connected tools. Access to external systems or sensitive information is not an inherent capability of the development runner and is therefore not included as a general impact. Pipecat 1.6.0 clarifies this security boundary in two ways: - The development runner displays a prominent startup banner identifying it as a development tool. - The documentation explicitly states that the runner must not be used as a production server or exposed directly to untrusted traffic. The local development documentation (https://docs.pipecat.ai/pipecat/deployment/running-bots-locally) identifies the unauthenticated endpoints, lack of rate limiting, and risks of public exposure. The production deployment documentation (https://docs.pipecat.ai/pipecat/deployment/running-bots-in-production) directs users to a production dispatcher or managed runtime and describes minimum protections for limited prototype use. ### Resolution > Pipecat 1.6.0 documents and surfaces the intended security boundary of the de

Are you affected?

Enter the version you run. The result uses only the ranges stored on this record.

The check returns affected, not affected, or incomplete. It does not guess a version that is missing from the record.

  • PyPI pipecat-ai0.0.98 → 1.6.0
  • pip pipecat-ai>= 0.0.98, <= 1.5.0
  • pypi pipecat-aiversion unspecified

How to fix CVE-2026-102682

What to do

Three questions, each answered from this record only. Confirm the vendor advisory before you patch.

Should you patch?

No confirmed exploitation is on record for CVE-2026-102682. EPSS is 0.23%. Act only if a listed version of Pipecat is an open-source is installed.

Which versions are affected?

Compare what you have installed with 0.0.98 → 1.6.0, >= 0.0.98, <= 1.5.0. Compare the installed version with the linked vendor advisory before you change production.

What should an analyst verify?

CWE-345: Insufficient Verification of Data Authenticity; CWE-770: Allocation of Resources Without Limits or Throttling; CWE-862: Missing Authorization. EPSS 0.23%. There is no CISA KEV listing. No Exploit-DB or Metasploit reference is linked. Use the source links for the original advisory.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 14, 2026 · NIST NVD

    Detected

    Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents. From 0.0.98 until 1.6.0, the pipecat-ai package's built-in development runner exposes unauthenticated endpoints including /start, /daily, and /daily-dialin-webhook that can create bot sessions and Daily rooms. The runner binds to localhost by default and is intended only for local developm

  2. Oct 15, 2026 · GitHub Advisory Database

    Fix available

    pipecat-ai fixed in 1.6.0

  3. Oct 15, 2026 · GitHub Advisory Database

    Fix available

    pipecat-ai fixed in 1.6.0

  4. Oct 15, 2026 · GitHub Advisory Database

    Updated

    Pipecat’s built-in development runner exposes endpoints that create bot sessions and, for the Daily transport, paid Daily rooms. These development endpoints intentionally do not authenticate callers. The runner binds to localhost by default and is designed exclusively for local development. It is not built or supported as a production server. Exploitation therefore requires an operator to delibera

Sources

  • CVE.orgVulnerability recordCVE-2026-102682

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2026-102682

    30-day exploitation probability 0.2%

    first.org
  • GitHub Advisory DatabasePackage advisoryGHSA-hqm2-cfx2-2vgh

    Pipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creation

    github.com
  • GitLab Advisory DatabasePackage advisoryCVE-2026-102682

    Pipecat’s built-in development runner exposes endpoints that create bot sessions and, for the Daily transport, paid Daily rooms. These development endpoints intentionally do not authenticate callers. The runner binds to localhost by default and is designed exclusively for local development. It is not built or supported as a production server. Exploitation therefore requires an operator to delibera

    advisories.gitlab.com
  • NIST NVDVulnerability recordCVE-2026-102682

    Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents. From 0.0.98 until 1.6.0, the pipecat-ai package's built-in development runner exposes unauthenticated endpoints including /start, /daily, and /daily-dialin-webhook that c

    nvd.nist.gov
  • OpenSSF OSV / OSV ScannerPackage advisoryGHSA-hqm2-cfx2-2vgh

    Pipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creation

    osv.dev
  • PyPA Advisory DatabasePackage advisoryGHSA-hqm2-cfx2-2vgh

    Pipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creation

    osv.dev

References

Freshness

Last verified in this catalog Oct 18, 2026. Significant claims (KEV, EPSS, CVSS, affected ranges) come from the source rows above — open the original publisher for the authoritative advisory.