{"data":{"id":"8214eaa5-3c8d-4a15-bbb7-2614a5e75f3d","title":"GHSA-c2jg-5cp7-6wc7: Pipecat: Remote Code Execution by Pickle Deserialization Through LivekitFrameSerializer","summary":"A critical flaw in Pipecat's LivekitFrameSerializer, an optional, non-default, undocumented serializer deprecated in version 0.0.90, passes untrusted WebSocket message data directly to pickle.loads() in deserialize() in src/pipecat/serializers/livekit.py. A remote client that can reach a server using this serializer, for example one bound to 0.0.0.0, can send a crafted pickle payload to execute arbitrary code on the server with the Pipecat service's privileges.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-c2jg-5cp7-6wc7","publishedAt":"2026-04-23T21:15:42.000Z","cveId":"CVE-2025-62373","cweIds":null,"cvssScore":null,"cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["pipecat-ai@>= 0.0.41, < 0.0.94 (fixed: 0.0.94)"],"affectedPackageNames":["pipecat-ai"],"affectedPackageRefs":["pypi:pipecat-ai"],"affectedVendors":[],"affectedVendorsRaw":["Pipecat"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00701,"epssCheckedAt":"2026-11-10T12:15:59.475Z","kevDateAdded":null,"advisoryAliases":["GHSA-c2jg-5cp7-6wc7"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-04-23T21:15:42.000Z","fixReleasedAt":"2025-11-10T21:54:18.394Z","daysToFix":-164,"fixCheckedAt":"2026-10-29T21:37:25.958Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"pipecat-ai","fixedVersion":"0.0.94","matchedVersion":"0.0.94","fixReleasedAt":"2025-11-10T21:54:18.394Z","daysToFix":-164,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:37:25.722Z"}]}}