{"data":{"id":"37f3e7aa-b0cb-4868-8035-71e6ebe59abb","title":"GHSA-j8cv-x86q-rj85: Pipecat: Telephony WebSocket `/ws` Unauthenticated Call-Control Abuse via Attacker-Supplied Call SID","summary":"The pipecat development runner exposes a `/ws` WebSocket endpoint for telephony testing that accepts connections without authentication. An unauthenticated attacker can send a crafted Twilio stream-start message with an attacker-supplied `callSid`, causing the server to send a hang-up request to Twilio's REST API using the operator's own account credentials. The source says this may let an attacker terminate an active call on a victim's Twilio account if they know or obtain a valid call SID, and that equivalent sinks exist for Telnyx and Plivo.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-j8cv-x86q-rj85","publishedAt":"2026-06-18T15:05:17.000Z","cveId":"CVE-2026-54695","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["pipecat-ai@>= 0.0.77, < 1.4.0 (fixed: 1.4.0)"],"affectedPackageNames":["pipecat-ai"],"affectedPackageRefs":["pypi:pipecat-ai"],"affectedVendors":[],"affectedVendorsRaw":["Pipecat","Twilio","Telnyx","Plivo"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00564,"epssCheckedAt":"2026-11-04T06:10:13.969Z","kevDateAdded":null,"advisoryAliases":["GHSA-j8cv-x86q-rj85"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-06-18T15:05:17.000Z","fixReleasedAt":"2026-06-17T03:27:46.367Z","daysToFix":-1,"fixCheckedAt":"2026-10-29T21:34:18.670Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","availability"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"pipecat-ai","fixedVersion":"1.4.0","matchedVersion":"1.4.0","fixReleasedAt":"2026-06-17T03:27:46.367Z","daysToFix":-1,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:34:18.521Z"}]}}