Path Traversal in Pipecat Runner /files Endpoint — Arbitrary File Read via %2F

github.com 2026-06-13查看中文 →

Security AdvisoryHighPipecat

Affected:

pipecat-ai/pipecat >=0.90,<1.2.0

Fixed in:

>=1.2.0

Referenced CVEs: CVE-2026-44716 · 7.5

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Multi-tenant IDOR Vulnerability Analysis and Fix in Brand/Calendar/Campaign Modules 2026-07-03 SSRF Vulnerability in Eclipse Theia via /services/request-service RPC (CVE-2026-1005) 2026-07-03 Theia Terminal WebSocket Unauthorized Command Execution via Cross-Origin Access (GHSA-78g8-vm3p-97c6) 2026-07-03 Kong Connect MCP Stored Prompt Injection and Credential Exposure (GHSA-7767-3m3w-2p44) 2026-07-03 CISA Advisory ICSA-26-183-03: Unauthenticated Access Vulnerability in Industrial Control Systems 2026-07-03

Offline Archive

Offline screenshot & PDF are Pro-exclusive