Unauthenticated Access in Pipecat's Development Runner

CVE-2026-102682

What is CVE-2026-102682?

The pipecat-ai package in versions 0.0.98 to 1.6.0 has a vulnerability where the built-in development runner exposes unauthenticated endpoints, allowing unauthorized access to create bot sessions and Daily rooms. Although the runner is intended for local development and binds to localhost by default, it can be exploited if misconfigured by exposing it to external traffic. Attackers can utilize this vulnerability to consume local resources, deplete third-party quotas, and potentially gain access to sensitive information such as room URLs and join tokens. Version 1.6.0 addresses these concerns by introducing clear documentation and a prominent banner that guides users to secure deployments.

References