CVE-2026-44716 Details

A path traversal vulnerability has been identified in the Pipecat development runner, specifically in versions 0.0.90 prior to 1.2.0. The vulnerability arises when the runner is initiated with the '--folder' flag, which activates a download endpoint that allows for file retrieval. The issue stems from the fact that the 'filename' parameter is directly appended to the specified folder path without proper validation. Although Starlette, the underlying framework, normalizes literal '../' sequences in URLs, '%2F'-encoded slashes can bypass this safeguard. This flaw allows an attacker with network access to the runner to read any file accessible to the Pipecat process, including sensitive files like SSH private keys and application credentials, with a single unauthenticated HTTP request.

Users can update to Pipecat version 1.2.0 or later, where this vulnerability has been patched. The fix involves validating the download path to ensure it remains within the designated folder, effectively blocking any traversal attempts that could escape the folder's boundaries.