{"data":{"id":"03cb8eb7-3fb5-44e7-afdf-55b61b1106ab","title":"GHSA-3363-2ph6-35wh: Pipecat: Path Traversal in Pipecat Runner `/files` Endpoint — Arbitrary File Read via `%2F`-Encoded Separator","summary":"Pipecat's development runner, started with the --folder flag, exposes a GET /files/{filename:path} endpoint in src/pipecat/runner/run.py that joins the filename directly onto args.folder without a containment check. Starlette decodes %2F after routing, so a request such as ..%2F..%2Fetc%2Fpasswd escapes the folder, and the endpoint has no authentication. The advisory confirms this on pipecat-ai 1.1.0 and commit f078df78058ae82a02ce5b23e9e3a99a0917a53d.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-3363-2ph6-35wh","publishedAt":"2026-05-15T16:55:04.000Z","cveId":"CVE-2026-44716","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["pipecat-ai@>= 0.0.90, < 1.2.0 (fixed: 1.2.0)"],"affectedPackageNames":["pipecat-ai"],"affectedPackageRefs":["pypi:pipecat-ai"],"affectedVendors":[],"affectedVendorsRaw":["Pipecat"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00423,"epssCheckedAt":"2026-11-07T12:08:47.755Z","kevDateAdded":null,"advisoryAliases":["GHSA-3363-2ph6-35wh"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-05-15T16:55:04.000Z","fixReleasedAt":"2026-05-14T21:49:26.635Z","daysToFix":-1,"fixCheckedAt":"2026-10-29T21:35:58.466Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"pipecat-ai","fixedVersion":"1.2.0","matchedVersion":"1.2.0","fixReleasedAt":"2026-05-14T21:49:26.635Z","daysToFix":-1,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:35:58.320Z"}]}}