CVE-2026-54695: CWE-862: Missing Authorization in pipecat-ai pipecat
Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents. Prior to 1.4.0, the pipecat development runner registers a /ws WebSocket endpoint for telephony testing that accepts connections without authentication, reads an attacker-supplied callSid from a Twilio stream-start handshake in src/pipecat/runner/utils.py, and passes it to TwilioFrameSerializer so the server can issue an authenticated Twilio REST API hang-up request with the server operator's credentials; equivalent unauthenticated call-control sinks exist for Telnyx and Plivo. This issue is fixed in version 1.4.0.
AI Analysis
Technical Summary
CVE-2026-54695 describes a missing authorization vulnerability (CWE-862) in the pipecat open-source Python framework for building conversational agents. Before version 1.4.0, the development runner exposes a /ws WebSocket endpoint that accepts unauthenticated connections for telephony testing. An attacker can supply a callSid from a Twilio stream-start handshake, which is then passed to TwilioFrameSerializer, enabling the server to issue authenticated Twilio REST API hang-up requests using the server operator's credentials. Similar unauthenticated call-control sinks exist for Telnyx and Plivo. This vulnerability allows unauthorized call control actions without proper authentication. The vulnerability is resolved in pipecat version 1.4.0.
Potential Impact
The vulnerability allows unauthenticated attackers to perform unauthorized call control actions, such as hanging up calls, by exploiting the exposed /ws WebSocket endpoint. This can lead to denial of service against telephony sessions and potential disruption of voice communications. The issue does not impact confidentiality but impacts integrity and availability of telephony operations.
Mitigation Recommendations
Upgrade pipecat to version 1.4.0 or later, where this missing authorization vulnerability has been fixed. No other mitigation is required as the fix addresses the root cause by enforcing proper authentication on the /ws WebSocket endpoint.
CVE-2026-54695: CWE-862: Missing Authorization in pipecat-ai pipecat
Description
Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents. Prior to 1.4.0, the pipecat development runner registers a /ws WebSocket endpoint for telephony testing that accepts connections without authentication, reads an attacker-supplied callSid from a Twilio stream-start handshake in src/pipecat/runner/utils.py, and passes it to TwilioFrameSerializer so the server can issue an authenticated Twilio REST API hang-up request with the server operator's credentials; equivalent unauthenticated call-control sinks exist for Telnyx and Plivo. This issue is fixed in version 1.4.0.
CVSS v3.1
Score 7.5high
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-54695 describes a missing authorization vulnerability (CWE-862) in the pipecat open-source Python framework for building conversational agents. Before version 1.4.0, the development runner exposes a /ws WebSocket endpoint that accepts unauthenticated connections for telephony testing. An attacker can supply a callSid from a Twilio stream-start handshake, which is then passed to TwilioFrameSerializer, enabling the server to issue authenticated Twilio REST API hang-up requests using the server operator's credentials. Similar unauthenticated call-control sinks exist for Telnyx and Plivo. This vulnerability allows unauthorized call control actions without proper authentication. The vulnerability is resolved in pipecat version 1.4.0.
Potential Impact
The vulnerability allows unauthenticated attackers to perform unauthorized call control actions, such as hanging up calls, by exploiting the exposed /ws WebSocket endpoint. This can lead to denial of service against telephony sessions and potential disruption of voice communications. The issue does not impact confidentiality but impacts integrity and availability of telephony operations.
Mitigation Recommendations
Upgrade pipecat to version 1.4.0 or later, where this missing authorization vulnerability has been fixed. No other mitigation is required as the fix addresses the root cause by enforcing proper authentication on the /ws WebSocket endpoint.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-06-15T22:58:06.562Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a4ff3f768715ace43ecf665
Added to database: 07/09/2026, 19:18:15 UTC
Last enriched: 07/17/2026, 09:54:08 UTC
Last updated: 08/22/2026, 22:52:14 UTC
Views: 114
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.