Detections
Analytics

SCA: security update for pipecat-ai (GHSA-3363-2ph6-35wh)

high Tenable Self-Hosted Container Security Plugin ID 441986

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - Pipecat is an open-source Python framework for building real-time voice and multimodal conversational
 agents. From version 0.0.90 to before version 1.2.0, a path traversal vulnerability exists in Pipecat's
 development runner (src/pipecat/runner/run.py). When the runner is started with the --folder flag, it
 exposes a GET /files/{filename:path} download endpoint. The filename path parameter is concatenated
 directly onto args.folder with no containment check. Starlette normalises literal ../ sequences in URLs,
 but %2F-encoded slashes bypass this normalisation: the path parameter is URL-decoded after routing, so
 ..%2F..%2Fetc%2Fpasswd resolves to a path two levels above args.folder. An attacker with network access to
 the runner can read any file the pipecat process has permission to access — including SSH private keys,
 credentials, and system files — with a single unauthenticated HTTP request. This issue has been patched in
 version 1.2.0. (CVE-2026-44716)

Solution

Update the pipecat-ai library and its related packages to version 1.2.0 or later.

See Also

https://github.com/advisories/GHSA-3363-2ph6-35wh

Plugin Details

Severity: High

ID: 441986

Version: Revision 1.6

Type: Local

Family: SCA Checks

Published: 5/15/2026

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.76

Vendor

Vendor Severity: High

CVSS v2

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.1

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N

CVSS Score Source: CVE-2026-44716

CVSS v3

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.7

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 5/15/2026

Vulnerability Publication Date: 5/15/2026

Reference Information

CVE: CVE-2026-44716

cwe: CWE-22