CVE-2026-54695 Details
Description
Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents. Prior to 1.4.0, the pipecat development runner registers a /ws WebSocket endpoint for telephony testing that accepts connections without authentication, reads an attacker-supplied callSid from a Twilio stream-start handshake in src/pipecat/runner/utils.py, and passes it to TwilioFrameSerializer so the server can issue an authenticated Twilio REST API hang-up request with the server operator's credentials; equivalent unauthenticated call-control sinks exist for Telnyx and Plivo. This issue is fixed in version 1.4.0.
A vulnerability exists in the Pipecat development runner's WebSocket endpoint for telephony testing, prior to version 1.4.0. The endpoint accepts connections without authentication, allowing an attacker to inject a call SID from a Twilio stream-start handshake. This injected SID is then used to issue an authenticated hang-up request via the Twilio REST API, using the server operator's credentials. Similar unauthenticated call-control vulnerabilities are present for Telnyx and Plivo. The issue can be exploited by connecting to the WebSocket endpoint and sending a crafted handshake message with an attacker-supplied call SID, which can then be used to terminate an active call on the victim's Twilio account.
Users can upgrade to Pipecat version 1.4.0 or later, and enable WebSocket token authentication to protect the endpoint. Instructions for this are available in the Pipecat release notes.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 10, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/pipecat-ai/pipecat/security/advisories/GHSA-j8cv-x86q-rj85 | CISA-ADP | ExploitMitigationVendor Advisory |
| https://github.com/pipecat-ai/pipecat/commit/3032da53434c5ef01d368654b3551cf21c50dec9 | [email protected] | Patch |
| https://github.com/pipecat-ai/pipecat/commit/88440676996e5e548e1aecea5d565e1c48ccf6fa | [email protected] | Patch |
| https://github.com/pipecat-ai/pipecat/pull/4660 | [email protected] | Issue TrackingPatch |
| https://github.com/pipecat-ai/pipecat/releases/tag/v1.4.0 | [email protected] | Issue TrackingPatch |
| https://github.com/pipecat-ai/pipecat/security/advisories/GHSA-j8cv-x86q-rj85 | [email protected] | ExploitMitigationVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-862 | Missing Authorization | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| pipecat pipecat | < 1.4.0 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 13, 2026 | Initial Analysis | [email protected] |
| Jul 10, 2026 | CVE Modified | CISA-ADP |
| Jul 9, 2026 | New CVE Received | [email protected] |