PT-2026-34667 · Pipecat · Pipecat
Published
2026-04-23
·
Updated
2026-05-01
·
CVE-2025-62373
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Pipecat versions 0.0.41 through 0.0.93
Description
An issue exists in the
LivekitFrameSerializer class, an optional and deprecated frame serializer used for LiveKit integration. The deserialize() function in src/pipecat/serializers/livekit.py uses Python's pickle.loads() to process data received from WebSocket clients without proper validation or sanitization. A malicious client can send a specially crafted pickle payload to execute arbitrary code on the server. This can lead to full system compromise if the server is configured to use this serializer and is listening on an external interface.Recommendations
Update to version 0.0.94 or later and switch to the recommended
LiveKitTransport or another secure method provided by the framework.
Stop using the LivekitFrameSerializer class entirely.
Bind the server to 127.0.0.1 instead of 0.0.0.0 to prevent external network access.
Implement authentication and authorization on WebSocket connections to restrict who can send data.Exploit
Fix
RCE
Deserialization of Untrusted Data
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Pipecat