CVE-2026-102682

Name of the Vulnerable Software and Affected Versions pipecat-ai versions 0.0.98 through 1.5.9

Description The built-in development runner of the pipecat-ai framework exposes unauthenticated endpoints, specifically '/start', '/daily', and '/daily-dialin-webhook', which allow the creation of bot sessions and Daily rooms. While the runner binds to localhost by default for local development, it can be exploited if an operator exposes it to untrusted traffic via --host 0.0.0.0, a published port, or an uncontrolled tunnel. An unauthenticated caller may consume local resources and third-party quotas, and potentially obtain a room URL and join token depending on the configuration.

Recommendations Update to version 1.6.0. Avoid exposing the development runner to untrusted traffic by not using --host 0.0.0.0, published ports, or tunnels without access controls. Use an authenticated dispatcher or managed runtime for production deployments.